General
- Target setup.exe
- Size 5.3MB
- Sample260803-swbpcabe28
- SHA256 dcaac606f8c3ac68745ed16bb82f56ba828df00af3ce70d02b43d0453c9ac02e
- MD5 94cddc3cd2d4cab0426d420a2172f582
- SHA1 2baea535916b61a67a7d4472e465eeb68e98c7e2
- SHA512 0dd44d77c24ff74b45fe2e0c0a7b55f1228ab1de5d89516c092758d3a6e9cd8c8de24519b29b954ec6b47325fce03d6c8812357c11e076bcb59c8cb4b0a4e558
- SSDEEP 98304:Kf7wCQInrje/CAVMJy1WGsF3V/gdQer9OuEcLUBN:Kfn6/VSlGC3V/gdQIjLUL
- TLSH T1CC463301E3832536E4640D745D62E0A86D23F6FB6AD065351EBCDB4F0BB91837EB66B0
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
setup.exe
Resource
win10v2004-20260513-en
21 signatures
150 seconds
Malware Config
Targets
-
- Target setup.exe
- Size 5.3MB
- SHA256 dcaac606f8c3ac68745ed16bb82f56ba828df00af3ce70d02b43d0453c9ac02e
- MD5 94cddc3cd2d4cab0426d420a2172f582
- SHA1 2baea535916b61a67a7d4472e465eeb68e98c7e2
- SHA512 0dd44d77c24ff74b45fe2e0c0a7b55f1228ab1de5d89516c092758d3a6e9cd8c8de24519b29b954ec6b47325fce03d6c8812357c11e076bcb59c8cb4b0a4e558
- SSDEEP 98304:Kf7wCQInrje/CAVMJy1WGsF3V/gdQer9OuEcLUBN:Kfn6/VSlGC3V/gdQIjLUL
- TLSH T1CC463301E3832536E4640D745D62E0A86D23F6FB6AD065351EBCDB4F0BB91837EB66B0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.