General
- Target reshacker_setup.exe
- Size 4.1MB
- Sample260801-n3deasthmh
- SHA256 b611be2f35cb44efd1c29df03e7ebe62bd556a500585680e1afa5e073eaf1756
- MD5 0fa54be54c421f87da625916342520bc
- SHA1 177674653365c29f4da964beb023aa5a1fe06fbb
- SHA512 73edfef164fce793bd584f478948b5d9b7d4f2bb4d673bd5e331b7afe8585c3ff933d489cc6a302661d2478f121c9c9a77c68013c3df1f8aa8b49ea75ad9fe7a
- SSDEEP 98304:HEAzjsfOebFxr7Ejfv6fP1hhNnF2Ie2cKLomIASLUHBrICn:zzjsfOe5l7K+1hhNngIpL6IHT
- TLSH T1D316013FB268653EC4AA1B324573D260997BBE61A41B8C2F17F0591DCF264A01F3FA15
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
reshacker_setup.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target reshacker_setup.exe
- Size 4.1MB
- SHA256 b611be2f35cb44efd1c29df03e7ebe62bd556a500585680e1afa5e073eaf1756
- MD5 0fa54be54c421f87da625916342520bc
- SHA1 177674653365c29f4da964beb023aa5a1fe06fbb
- SHA512 73edfef164fce793bd584f478948b5d9b7d4f2bb4d673bd5e331b7afe8585c3ff933d489cc6a302661d2478f121c9c9a77c68013c3df1f8aa8b49ea75ad9fe7a
- SSDEEP 98304:HEAzjsfOebFxr7Ejfv6fP1hhNnF2Ie2cKLomIASLUHBrICn:zzjsfOe5l7K+1hhNngIpL6IHT
- TLSH T1D316013FB268653EC4AA1B324573D260997BBE61A41B8C2F17F0591DCF264A01F3FA15
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.