General
- Target INSTALL.EXE
- Size 641KB
- Sample260730-ph7yvahd26
- SHA256 30864d9242eae865af0b2fe53a035ab9f09fa0409a56999ffacc5aa5db5b5c67
- MD5 beee002129ec57ae7f9c6c6dc97955cb
- SHA1 ba12da8da00ab6b08b608c684892e828f0322c7f
- SHA512 ea276d85cf1f54cfb32cb068191014fdc94a32d4dd0e8887b0e6682a4def4e1061aeb72517276c05c95999b95135efb42f474e1e82534e4654852ad7b4e47b09
- SSDEEP 12288:WXMMRY+OOhV+hcFGJE78nm89KgYxcKM/nPN0Lrb462rip0qTtN82RJmFx3:WXJY+OOhV+2FGJlmTch/nen482W6amFB
- TLSH T179E4E002B2C181F2ED71193105F6D92A4A7E7C358E705AAF73D83A299DB03514736FAB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
INSTALL.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
INSTALL.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target INSTALL.EXE
- Size 641KB
- SHA256 30864d9242eae865af0b2fe53a035ab9f09fa0409a56999ffacc5aa5db5b5c67
- MD5 beee002129ec57ae7f9c6c6dc97955cb
- SHA1 ba12da8da00ab6b08b608c684892e828f0322c7f
- SHA512 ea276d85cf1f54cfb32cb068191014fdc94a32d4dd0e8887b0e6682a4def4e1061aeb72517276c05c95999b95135efb42f474e1e82534e4654852ad7b4e47b09
- SSDEEP 12288:WXMMRY+OOhV+hcFGJE78nm89KgYxcKM/nPN0Lrb462rip0qTtN82RJmFx3:WXJY+OOhV+2FGJlmTch/nen482W6amFB
- TLSH T179E4E002B2C181F2ED71193105F6D92A4A7E7C358E705AAF73D83A299DB03514736FAB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL