General
- Target Win7UpgradeMate.exe
- Size 23.1MB
- Sample260803-gzf8fsdb68
- SHA256 d84347ddbae9d43e179cc8dbaff32df3f0824d48f40130ccdbb3bcd85cc05124
- MD5 997cd6eed8e5a16e5639d69ca6e055d4
- SHA1 cb688d9f18d18ba84066e2405e459912d1cea952
- SHA512 7cfb758ec7fc9f6fa17256e1f18ebe21b36a29da14dba7ee59b8910c8dddfe25099231ea1a8dbb8f5c24397771a1af6d710deb51b3286eb2b8f2cbcc6e50dbae
- SSDEEP 393216:RCZcfq0gUYPrONXSTCoQPzqUFu8l6iL/76DmlXavnaDuVaTxTgmpyx6en5TI/V+q:nfLzqrmCTCoGzfc6/7TCiuggmpyxlnG
- TLSH T1A3373317B3CBA63FF0AA493249B3D2224537BA6155069C679BE8085DCF221D41F3FA17
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Win7UpgradeMate.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target Win7UpgradeMate.exe
- Size 23.1MB
- SHA256 d84347ddbae9d43e179cc8dbaff32df3f0824d48f40130ccdbb3bcd85cc05124
- MD5 997cd6eed8e5a16e5639d69ca6e055d4
- SHA1 cb688d9f18d18ba84066e2405e459912d1cea952
- SHA512 7cfb758ec7fc9f6fa17256e1f18ebe21b36a29da14dba7ee59b8910c8dddfe25099231ea1a8dbb8f5c24397771a1af6d710deb51b3286eb2b8f2cbcc6e50dbae
- SSDEEP 393216:RCZcfq0gUYPrONXSTCoQPzqUFu8l6iL/76DmlXavnaDuVaTxTgmpyx6en5TI/V+q:nfLzqrmCTCoGzfc6/7TCiuggmpyxlnG
- TLSH T1A3373317B3CBA63FF0AA493249B3D2224537BA6155069C679BE8085DCF221D41F3FA17
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.