General
- Target adb-setup-1.4.3.exe
- Size 9.2MB
- Sample260802-vdc6kacq9v
- SHA256 ca297f88ae58cc436028e07482e04e429e6bc81eab291cba814aa196d2c4f419
- MD5 8c9085d4f753a2aab26082fd2eb46a8e
- SHA1 eae637085255a1c7d903a880374b20d108a3c38b
- SHA512 4163b79dda651eaef83408ceac6b6d4cfadb940be816c5261f0decd203324899d40779203eee8734d8616eb14cd5bf3a13bf649977856ac823f3b7723c7629e4
- SSDEEP 196608:cwYvfXDBYhBpeLHe3+EPegZT3VCz0TByC+Py7FU+LCZAsdX3LBO9:3ibBYDey3PFCuByPyhRwxBBI
- TLSH T15DA633C6FF9D3AD9C0A452F9BE7636C7A260CCC97676030A3E553B28DD75148AC9A1C0
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
adb-setup-1.4.3.exe
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target adb-setup-1.4.3.exe
- Size 9.2MB
- SHA256 ca297f88ae58cc436028e07482e04e429e6bc81eab291cba814aa196d2c4f419
- MD5 8c9085d4f753a2aab26082fd2eb46a8e
- SHA1 eae637085255a1c7d903a880374b20d108a3c38b
- SHA512 4163b79dda651eaef83408ceac6b6d4cfadb940be816c5261f0decd203324899d40779203eee8734d8616eb14cd5bf3a13bf649977856ac823f3b7723c7629e4
- SSDEEP 196608:cwYvfXDBYhBpeLHe3+EPegZT3VCz0TByC+Py7FU+LCZAsdX3LBO9:3ibBYDey3PFCuByPyhRwxBBI
- TLSH T15DA633C6FF9D3AD9C0A452F9BE7636C7A260CCC97676030A3E553B28DD75148AC9A1C0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Manipulates Digital Signatures
Attackers can apply techniques such as changing the registry keys of authenticode & Cryptography to make their binary seem validly signed.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory