General
- Target APManagerSetup.exe
- Size 21.5MB
- Sample260731-fxmf1svbjf
- SHA256 33e5e1182d0ef770142af45380ec4d8202301d642c05f6a2289f2b0909aeaa19
- MD5 72c865e568341c6ccbddca0071e3abad
- SHA1 7923f890e2a976749d4d105c58b17d3e61a4377f
- SHA512 efc148cb1c2ba3965d467389a9c91125b5d1c0e23a490473a85756e69585cd6d2b00effc6855b7d9502ab5909cc2bf8d3eb33001fe675e0110b4460d3f1f4fe4
- SSDEEP 393216:Uj+jqnbZBBjlvtBHRpZYz0TkJWEJLOWyLo5rexaTvLDivs1VU53rB:Uj+jAB5vt/pZYz0TALggzRG7B
- TLSH T131373366A74C8FFECA06683282BBFE856F760408410A51A3D1DDDD5F93373922AF5E44
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
APManagerSetup.exe
Resource
win10v2004-20260513-en
26 signatures
150 seconds
Malware Config
Targets
-
- Target APManagerSetup.exe
- Size 21.5MB
- SHA256 33e5e1182d0ef770142af45380ec4d8202301d642c05f6a2289f2b0909aeaa19
- MD5 72c865e568341c6ccbddca0071e3abad
- SHA1 7923f890e2a976749d4d105c58b17d3e61a4377f
- SHA512 efc148cb1c2ba3965d467389a9c91125b5d1c0e23a490473a85756e69585cd6d2b00effc6855b7d9502ab5909cc2bf8d3eb33001fe675e0110b4460d3f1f4fe4
- SSDEEP 393216:Uj+jqnbZBBjlvtBHRpZYz0TkJWEJLOWyLo5rexaTvLDivs1VU53rB:Uj+jAB5vt/pZYz0TALggzRG7B
- TLSH T131373366A74C8FFECA06683282BBFE856F760408410A51A3D1DDDD5F93373922AF5E44
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Manipulates Digital Signatures
Attackers can apply techniques such as changing the registry keys of authenticode & Cryptography to make their binary seem validly signed.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops file in System32 directory
-
Enumerates processes with tasklist
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1SIP and Trust Provider Hijacking
1