General
- Target INSTALL.EXE
- Size 637KB
- Sample260730-prv1ms11fz
- SHA256 b2707efd370de9eba1204c7065a5268fe23a9810092af761c3b443e13ba821de
- MD5 f8d03d7f9759be8ca4135002209cbfdc
- SHA1 a7db60a3648fe288177fa88a7e8a2204c5df5cf6
- SHA512 777e9e9c6f5c5963b703f332006154eae53015512c203cdb35b9acc108aae7cfa514af5c79701889865d2241667ed42899ed0e01b124990e825b2a1e1b084036
- SSDEEP 12288:wADBlUa4/roO+Qj1gU+HcCYhCKM+8dtFPlEQXJwU:wAfUa4/UO+3U+HcCh+pQl
- TLSH T1F0D4E00272C181F3E971193114FB962A5A7D7C659AB059EB73DC362E8E70340873AFA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
INSTALL.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
INSTALL.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target INSTALL.EXE
- Size 637KB
- SHA256 b2707efd370de9eba1204c7065a5268fe23a9810092af761c3b443e13ba821de
- MD5 f8d03d7f9759be8ca4135002209cbfdc
- SHA1 a7db60a3648fe288177fa88a7e8a2204c5df5cf6
- SHA512 777e9e9c6f5c5963b703f332006154eae53015512c203cdb35b9acc108aae7cfa514af5c79701889865d2241667ed42899ed0e01b124990e825b2a1e1b084036
- SSDEEP 12288:wADBlUa4/roO+Qj1gU+HcCYhCKM+8dtFPlEQXJwU:wAfUa4/UO+3U+HcCh+pQl
- TLSH T1F0D4E00272C181F3E971193114FB962A5A7D7C659AB059EB73DC362E8E70340873AFA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL