General
- Target xmodhubInstaller__20260722_192800_channel100163.exe
- Size 123.7MB
- Sample260731-tpye7sdb98
- SHA256 6b8d2fec75b375cb812a008853ade87db1f03ee3e82a56270de6cb1894d17490
- MD5 8cfbba61d70c379018696f622d0f2406
- SHA1 0773b7ac0b4a0ee0983c7a0f474e0f777a5f473f
- SHA512 cb80b8d1c3b34c0980c2a1213ff4c6d43c999f4a35225b05a12c1206d7feb22b1a20970bb5220e78e7c3bc86f4ed35e95fae582822694c171ce7a9b75d2727b4
- SSDEEP 1572864:fI0EtJY1+AmvFqbtcvXUMsUsDbh8uSO3ANVo4ryuHbHFH8w/gDJSGHkpDkHc5WGK:fD76FAtieSO3Akeb+9VSGHSkHc5E0YJr
- TLSH T1B45833107AA2C0B4D94502F23A3877A158A9ABE43774F4E767C03D9C3F728E1A6356F5
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
xmodhubInstaller__20260722_192800_channel100163.exe
Resource
win10v2004-20260513-en
20 signatures
150 seconds
Malware Config
Targets
-
- Target xmodhubInstaller__20260722_192800_channel100163.exe
- Size 123.7MB
- SHA256 6b8d2fec75b375cb812a008853ade87db1f03ee3e82a56270de6cb1894d17490
- MD5 8cfbba61d70c379018696f622d0f2406
- SHA1 0773b7ac0b4a0ee0983c7a0f474e0f777a5f473f
- SHA512 cb80b8d1c3b34c0980c2a1213ff4c6d43c999f4a35225b05a12c1206d7feb22b1a20970bb5220e78e7c3bc86f4ed35e95fae582822694c171ce7a9b75d2727b4
- SSDEEP 1572864:fI0EtJY1+AmvFqbtcvXUMsUsDbh8uSO3ANVo4ryuHbHFH8w/gDJSGHkpDkHc5WGK:fD76FAtieSO3Akeb+9VSGHSkHc5E0YJr
- TLSH T1B45833107AA2C0B4D94502F23A3877A158A9ABE43774F4E767C03D9C3F728E1A6356F5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2PowerShell
1Windows Command Shell
1Defense Evasion
Modify Registry
1Subvert Trust Controls
2Install Root Certificate
2