General
- Target setup.exe
- Size 3.8MB
- Sample260730-kvp7caef57
- SHA256 ceed3842ac64845df911ca2caa3110358b79cd63976c55373a31f384c10f3d62
- MD5 ff861eeb4dba5ef2233d6919d06585da
- SHA1 eaf444fbe65e5dcb334e21eda9ef3b126298dcda
- SHA512 d90d740bed6bbd18c52ee81bf0e0eec33c2aa023b9f9afc42e02c1acad148c066213eb7f67a335fdca7cfff608c305f68fae54cb70f62a527add0fd06d775d80
- SSDEEP 49152:vo0cAfn7wh0QIaUrjJcIAVUbUVPH12JxQHh3PW/MH4NSVZC97kGnHFg+R2v:hf7wCQInrje/CAVMJy1W/MN2MN
- TLSH T136063301F3C30536E4540C355E5295786E23BAA62AE960196FFCCB9F0BB91C37AB7670
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
setup.exe
Resource
win10v2004-20260513-en
20 signatures
150 seconds
Malware Config
Targets
-
- Target setup.exe
- Size 3.8MB
- SHA256 ceed3842ac64845df911ca2caa3110358b79cd63976c55373a31f384c10f3d62
- MD5 ff861eeb4dba5ef2233d6919d06585da
- SHA1 eaf444fbe65e5dcb334e21eda9ef3b126298dcda
- SHA512 d90d740bed6bbd18c52ee81bf0e0eec33c2aa023b9f9afc42e02c1acad148c066213eb7f67a335fdca7cfff608c305f68fae54cb70f62a527add0fd06d775d80
- SSDEEP 49152:vo0cAfn7wh0QIaUrjJcIAVUbUVPH12JxQHh3PW/MH4NSVZC97kGnHFg+R2v:hf7wCQInrje/CAVMJy1W/MN2MN
- TLSH T136063301F3C30536E4540C355E5295786E23BAA62AE960196FFCCB9F0BB91C37AB7670
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.