General
- Target BlockTheSpotInstaller.exe
- Size 9.7MB
- Sample260804-avds7ssyfv
- SHA256 95c9c1eda0d5ae9a8dc39d00ebcb404b27b345a6af7c3ad9c5c72919374a3d0b
- MD5 e672b2bc5ab4a12f1e92398b09a97813
- SHA1 feb3c48a9a3b462b3341396507de156f8d4dca98
- SHA512 320a4cadea2b7f058b7d4decb7a9aa5562053d4ed4f8a623ccea6845790fe59d9525d41f3ed46dc2221789ffe5790967457dddd46dbb5c0f79ca2784a4d7892d
- SSDEEP 98304:3leBA1hh8M5XctM4YGLG8Xy2+NfiBomfoE:3ld1n5MtM4PXy2k4B
- TLSH T10DA65B07E8A148E5C8ADD1348A66D2627B707C485F2127D32B90F7693FB7BD029BE744
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
BlockTheSpotInstaller.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
BlockTheSpotInstaller.exe
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target BlockTheSpotInstaller.exe
- Size 9.7MB
- SHA256 95c9c1eda0d5ae9a8dc39d00ebcb404b27b345a6af7c3ad9c5c72919374a3d0b
- MD5 e672b2bc5ab4a12f1e92398b09a97813
- SHA1 feb3c48a9a3b462b3341396507de156f8d4dca98
- SHA512 320a4cadea2b7f058b7d4decb7a9aa5562053d4ed4f8a623ccea6845790fe59d9525d41f3ed46dc2221789ffe5790967457dddd46dbb5c0f79ca2784a4d7892d
- SSDEEP 98304:3leBA1hh8M5XctM4YGLG8Xy2+NfiBomfoE:3ld1n5MtM4PXy2k4B
- TLSH T10DA65B07E8A148E5C8ADD1348A66D2627B707C485F2127D32B90F7693FB7BD029BE744
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.