General
- Target SetupCBBHSetupFull9.0.1.2.zip
- Size 8.1MB
- Sample260731-qevpsaba39
- SHA256 48ed9ec1a64ef3c14c754ab5948dd85ff1ac5e75ee250c5fac62960a18424162
- MD5 6ad6468138db3dd67e847b24eca4b232
- SHA1 9eb319c49cb2b384561e8e6ca45d61a5104a4ef7
- SHA512 5183d9ad192e0d776adb5bc4eea701dcec6dc411b1bbedf5b03aeee44606c426fa7e077f0cf527001068834643455ea2878b7f67d9ff6686d9c2a34c76ed9a0f
- SSDEEP 196608:YNVnq4pcvmApNMgYD+D1JUcBKLvskVF9gGYO2DTTG5:KE4pcvfYUnUcEDH7KTo
- TLSH T124863338FAF391B72A15E5705BC1212309D74CA53522E85ED202EBC8C55EE9B42BCF97
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
SpiderSetupAll.msi
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
SpiderSetupAll.msi
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
setup.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
setup.exe
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target SpiderSetupAll.msi
- Size 8.6MB
- SHA256 ed060d367539a4ad022a7fb9e3a8c6d4ce3d1192a059b68387a7fe7fb3306369
- MD5 7c337d3aa8a3fbde56b87fb9c822673d
- SHA1 75e36182b97ed8a2c733207f23a71b96ee65af0a
- SHA512 ae3ea93f806a98aa51341f0986758ea339ee5d0067d591c8c39b502437fd1d72f2ef7905296d0f5899d0873d1471094a1ece91880dc78a994fe79f7aded25a96
- SSDEEP 196608:UiqMqiKkaQvMqi+5mHaYDV1fvPMGSU0oToEdmfF+r6rp/5Yn1aB07u:eMqLkaQvTlNGPkfU0QNdG+r6rl5Y77u
- TLSH T1529633127741D133E26A06B46A7D2B7159BB6C7012E0154FE324BBDE5C323D293F8EA6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Loads dropped DLL
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target setup.exe
- Size 607KB
- SHA256 c67520aeb57a2d9896d08d789280fe22a5ab1e26ff39235163163ed3010a35e7
- MD5 d2865b8341bff4a2cca00f034d64a3c8
- SHA1 421b29a2f42f9e558cd419a94116caf22d26a490
- SHA512 e1d3062e3f07ff8bcab669c44dec341c6ce9409fa81bcdd26bebba3c1a48d59d38fcc1c92902360f78a14c0dea9bfdccc251a644aa1b4ce19f6023f12220ece9
- SSDEEP 12288:+DuWNvtS/PHV4c1JwX2afK+ixeCzKeMb01JQntLOCrTeM10bCE:+DlvEPTJmix5zKemrxhE
- TLSH T12FD4D72715EC7C76D07292B0AFF783E2E76CFC612520C92E22C5061D466E943B9527BE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.