General
- Target SplashtopSOS_Win_v3.8.4.1_RZZAWPJYALYXEU.exe
- Size 20.0MB
- Sample260731-tk4fnadb34
- SHA256 098a2ea17942acb76c797ac26400816f227a924a69e6b2aa5a932f01d223efff
- MD5 18744339d17aa70e37fc034cf830aea7
- SHA1 5086555f163d076a29887b036d3a1dd422df9919
- SHA512 c64aabed004abe46af3689acfa3ef67b6cd37a9e9003f2734cff3b2c4e2a005ef84ca3d03ca0f0425c340e77e16a6af6bd0f6f877796590b56bee050a051931a
- SSDEEP 393216:tts8jH8hsybqw8DPqpnO2qe4L1YY+uWwye24Sz4/zSKeN6sGb/n3:zscRgq72d46Jw724Sz4uMv
- TLSH T139273374E2487CE4F2BA4032F525B9590325BF529DCF548A93B875410AB67D1FF23E0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
SplashtopSOS_Win_v3.8.4.1_RZZAWPJYALYXEU.exe
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
SplashtopSOS_Win_v3.8.4.1_RZZAWPJYALYXEU.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target SplashtopSOS_Win_v3.8.4.1_RZZAWPJYALYXEU.exe
- Size 20.0MB
- SHA256 098a2ea17942acb76c797ac26400816f227a924a69e6b2aa5a932f01d223efff
- MD5 18744339d17aa70e37fc034cf830aea7
- SHA1 5086555f163d076a29887b036d3a1dd422df9919
- SHA512 c64aabed004abe46af3689acfa3ef67b6cd37a9e9003f2734cff3b2c4e2a005ef84ca3d03ca0f0425c340e77e16a6af6bd0f6f877796590b56bee050a051931a
- SSDEEP 393216:tts8jH8hsybqw8DPqpnO2qe4L1YY+uWwye24Sz4/zSKeN6sGb/n3:zscRgq72d46Jw724Sz4uMv
- TLSH T139273374E2487CE4F2BA4032F525B9590325BF529DCF548A93B875410AB67D1FF23E0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops file in System32 directory