General
- Target setupGDTWhereUsed.zip
- Size 1.2MB
- Sample260730-pekddahb73
- SHA256 858c814ed80fd4e58b44c1ff0bc71125e8528633988e6ef090d76c28892d4ffd
- MD5 408d5961cf7e23e08e3b3d4d6a9aeb03
- SHA1 78be393ffd64b81604b7558a975eccf0f2bec8e6
- SHA512 32af3c723590d1e10dbea6743eb65b3a0b6c5f247286a86e6e0bc4a713d6c9dac04a00bb638d6f2c560f0377285952611fbdeb11e42bd6fd2964459168da517c
- SSDEEP 24576:7TPeu1pHkT53hjpWYZwk72C+6wPYDRe/gzklpk8VaZV6JBF1j9AukRjlBN9+Kh4G:7TPekps5RVAC+ZuR+gAlumaZVwr1ubzR
- TLSH T1EB5533146FCBB4194BD25BB59F89940DB4CDFB6599908CBD3FF4CEACD2242A804493CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
setupGDTWhereUsed.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target setupGDTWhereUsed.exe
- Size 1.3MB
- SHA256 2deb9f39f41bd6d119464aea8839b2f291b496c883e7045486e334fba45b4dd0
- MD5 314c97d878d82e24c5466adf79f7b907
- SHA1 1cd5b01dba76f940b5f3a4b7016d67b7f8517ca9
- SHA512 78ecac2ae6fbbbe1dcf8db1a82e0bef74bc17e19650cc386aba7ef8373b09aab763d08e01e62f1a02d3b86182c0081f2c351853ee470fbb83cffcdcc8a0dab54
- SSDEEP 24576:CxGaAuvpXIT55b93WKXkk72A+s6PilX4dgjkdZkQVSnHixBVLj9o6k1vh/BZS0hU:nVCFY5ZxmA+LoXYgQdeSSnHe/fmDJo
- TLSH T1D4552302B7C34035FA615E34CDA58404BD5BBAB809F1A86E3FF8CE0D8A796D54C76792
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.