General
- Target SplashtopSOS_Win_v3.8.4.1_52JH2SXTLYSP.exe
- Size 19.3MB
- Sample260802-vnr3gattcs
- SHA256 e09d03a0b04feaefd9f907d427c4232fc86693f429129d556692ef81b2199621
- MD5 d06316700721caea59493ff707aa1bf9
- SHA1 cbbdcc7bcc5b69a86b934508126d783c8469b739
- SHA512 b753126e4269dca0bc2627c2731c461be8cb68431c25220dd1b8c0d8096e51ae33f36ea90a76168945905783a3b7962fb8e01eb82e0a80412026a22b14e6a80c
- SSDEEP 393216:bBs8jH8hsybqw8DPqpnO2qe4L1YY+uWwye24Sz4/zSKeN6sGb/n3v:dscRgq72d46Jw724Sz4uMv3
- TLSH T199173354EB9CBCA0E2FA5032B53582265735BF505A6D82CBD371752909F93C2AB33F06
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
SplashtopSOS_Win_v3.8.4.1_52JH2SXTLYSP.exe
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
SplashtopSOS_Win_v3.8.4.1_52JH2SXTLYSP.exe
Resource
win11ltsc2024-20260709-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target SplashtopSOS_Win_v3.8.4.1_52JH2SXTLYSP.exe
- Size 19.3MB
- SHA256 e09d03a0b04feaefd9f907d427c4232fc86693f429129d556692ef81b2199621
- MD5 d06316700721caea59493ff707aa1bf9
- SHA1 cbbdcc7bcc5b69a86b934508126d783c8469b739
- SHA512 b753126e4269dca0bc2627c2731c461be8cb68431c25220dd1b8c0d8096e51ae33f36ea90a76168945905783a3b7962fb8e01eb82e0a80412026a22b14e6a80c
- SSDEEP 393216:bBs8jH8hsybqw8DPqpnO2qe4L1YY+uWwye24Sz4/zSKeN6sGb/n3v:dscRgq72d46Jw724Sz4uMv3
- TLSH T199173354EB9CBCA0E2FA5032B53582265735BF505A6D82CBD371752909F93C2AB33F06
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops file in System32 directory