General
- Target EpsonPrintLayout1514_23.exe
- Size 32.2MB
- Sample260730-jsc9bstejd
- SHA256 57a5cf41d88918edec9c2ee14b649ac1aada6a850c533e8ef90585d4067bb4a4
- MD5 344ffbf7e64548338f0da64dd346f1e8
- SHA1 02cf8abad198dd271474014f75c47a4f1a1a19f4
- SHA512 17344129f6a0e04b8844cb7ec983ec3df0c204988b415c9fc8f9c4a86d6c11ea1a9652a1bf96880e3550de49d5271dbc9fb14589a8106b6305a32a893d63b5ef
- SSDEEP 786432:Aabub2V2aFJvXwVMr7i8Fg8nvJsVyXBM5g2y5HjFEzK1Nywexx:cKfXwVMr7i868nQyXBM5g35DFEW1Nyl
- TLSH T163773353334A0B3CD9971571CA83FAED0B283065913648A7E29C6F9937B719342F8B79
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
EpsonPrintLayout1514_23.exe
Resource
win10v2004-20260513-en
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
EpsonPrintLayout1514_23.exe
Resource
win11ltsc2024-20260709-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target EpsonPrintLayout1514_23.exe
- Size 32.2MB
- SHA256 57a5cf41d88918edec9c2ee14b649ac1aada6a850c533e8ef90585d4067bb4a4
- MD5 344ffbf7e64548338f0da64dd346f1e8
- SHA1 02cf8abad198dd271474014f75c47a4f1a1a19f4
- SHA512 17344129f6a0e04b8844cb7ec983ec3df0c204988b415c9fc8f9c4a86d6c11ea1a9652a1bf96880e3550de49d5271dbc9fb14589a8106b6305a32a893d63b5ef
- SSDEEP 786432:Aabub2V2aFJvXwVMr7i8Fg8nvJsVyXBM5g2y5HjFEzK1Nywexx:cKfXwVMr7i868nQyXBM5g35DFEW1Nyl
- TLSH T163773353334A0B3CD9971571CA83FAED0B283065913648A7E29C6F9937B719342F8B79
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops file in System32 directory