General
- Target wpsetup.exe
- Size 3.6MB
- Sample260803-vtygfatfrd
- SHA256 8463bc50680ad556a8e8e9db9a31fb01a0f26b7cf121739f8e8a6428065365d4
- MD5 655f4c06e08ec6637a86422e725777d2
- SHA1 4d439c7fbf6dcd7887a56b318b18f351bf814c37
- SHA512 032ad1828bc350c3f188b5e754a12e4347b1fd7665478282199922bf61a4a5661614c1845c4c11246de8414f40b7eb25e3fef73e76236178245a7d30f10b1cc2
- SSDEEP 98304:CMTbgrTYCMHXY2C631m2A8ubcOmBmVMrCO:CMTbg/YHIwFmqnBKO
- TLSH T18B0633C191B19D6DE4784DF59DECF7187EFC4E490661C82BA68CB7070B80E4A1672ABC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
wpsetup.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
wpsetup.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target wpsetup.exe
- Size 3.6MB
- SHA256 8463bc50680ad556a8e8e9db9a31fb01a0f26b7cf121739f8e8a6428065365d4
- MD5 655f4c06e08ec6637a86422e725777d2
- SHA1 4d439c7fbf6dcd7887a56b318b18f351bf814c37
- SHA512 032ad1828bc350c3f188b5e754a12e4347b1fd7665478282199922bf61a4a5661614c1845c4c11246de8414f40b7eb25e3fef73e76236178245a7d30f10b1cc2
- SSDEEP 98304:CMTbgrTYCMHXY2C631m2A8ubcOmBmVMrCO:CMTbg/YHIwFmqnBKO
- TLSH T18B0633C191B19D6DE4784DF59DECF7187EFC4E490661C82BA68CB7070B80E4A1672ABC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1