General
- Target setup.exe
- Size 5.3MB
- Sample260804-er56hacf89
- SHA256 07ca3c66a9aae4f8c7dbf49254ead1de3497559c654489ade15a9c2687b8d526
- MD5 71d5b6735fbd9b988dcd41c5b5783a3c
- SHA1 14ca809c5b48fe8db982ef8a2cfb75e837499c5c
- SHA512 7c9a2756b046c14bf83657869628213c0df974df84259c5f6bcb778fccf5c4dd7f7f24b99410ddaefbd953e24043a949b31706c64ca970379ff372c532ac8ae6
- SSDEEP 98304:Of7wCQInrje/CAVMJy1Wv7PRmrj/LEXJB4pIIV3hkcfiN:Ofn6/VSlvV4wXTs3hkcfo
- TLSH T1A0463305F7A3043AD4A508385E1796AC5D23F36629E5646A2EBCEBDF0F740433DF6A60
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
setup.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target setup.exe
- Size 5.3MB
- SHA256 07ca3c66a9aae4f8c7dbf49254ead1de3497559c654489ade15a9c2687b8d526
- MD5 71d5b6735fbd9b988dcd41c5b5783a3c
- SHA1 14ca809c5b48fe8db982ef8a2cfb75e837499c5c
- SHA512 7c9a2756b046c14bf83657869628213c0df974df84259c5f6bcb778fccf5c4dd7f7f24b99410ddaefbd953e24043a949b31706c64ca970379ff372c532ac8ae6
- SSDEEP 98304:Of7wCQInrje/CAVMJy1Wv7PRmrj/LEXJB4pIIV3hkcfiN:Ofn6/VSlvV4wXTs3hkcfo
- TLSH T1A0463305F7A3043AD4A508385E1796AC5D23F36629E5646A2EBCEBDF0F740433DF6A60
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.