General
- Target 20170614072846_23392.rar
- Size 1.7MB
- Sample260801-gzthsafa28
- SHA256 0b3052fbd6ce1321223a5ed2ae4b9d895d04e75ea1f50969bd23b7936735a85f
- MD5 8dd6bbee81b3cd8c7f86b9852f3da6ad
- SHA1 0b4816b84e9fece721e6a4792d4647fbfb84a6f7
- SHA512 8f8c8c6d7a275f0bd61d287e2ce9ea7e8794d6dc7d84a7455609a4e95274bb50a3240bc5308defa6c49234a989e07702d40e4bcb3ce740e2654325ba7591caef
- SSDEEP 49152:XBYnuGGDS0NncjjlKzatimW7EQIXeY2h9:ynuxJNn8RE9
- TLSH T15B85334474865896277686FD453253FA35D8DB2AF02E49EB6EE84F3C88432DCD0A70F6
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
UV6R_Setup_CH_1.35.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target UV6R_Setup_CH_1.35.exe
- Size 1.8MB
- SHA256 d3ca99308829e395b9ecbd73f318ba3211060b76ef15f96f53b18f65b3a08d9c
- MD5 9259f86892b3682b6232a014018660f2
- SHA1 839c7502a87693b8e03409fc509040ead16df93b
- SHA512 ab360f530a50f33962624260d16462e7324d4d7ad180057cab54831df3d842a4baff7cacbec3dd1c47f006b9dd5ee2a42328ba8413429928d8d6f655f0d30d2c
- SSDEEP 49152:hTC4uOVcY6JLvXND1pSE/ZMwD4RhBItaxAgg:h+a6JLfF1pSQ9DQhBAl
- TLSH T1A68533047E355C7BD1E4897308738A6B5BB63D139B8942431FDCBA6F6E303A1C926CA5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE