General
- Target clicketSetup.exe
- Size 67.5MB
- Sample260804-ezgg4sch27
- SHA256 1dbb31a7bf189c8c1f07461e0623a034c31f381c24c9c679b9d9daa807b7c848
- MD5 ce1ff78842b0dbd32fe53ca1188c09ea
- SHA1 d03230b1b929ef1066cd683bad1fb6bae3427898
- SHA512 93225b98564466727ca910df62894f2da4b837ab6c92d2dafb4e7ed2b0f85eab49ec8aa355d1b786f2247c5fcfdf11a3db71d17ff9c92f289db77c281060b57f
- SSDEEP 1572864:lXKKcDBGqU8ctMpD952mRnREv0m44MG3nN8r0ydl7Pm+nyqJIc:9KB8qoep552ERPQMi8rjd1Pm+n9Ic
- TLSH T1CCF7337BF2E8A42ECD6A05308772D025D97B6AA174FECC9947E8050DCB255603E2E737
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
clicketSetup.exe
Resource
win10v2004-20260513-en
14 signatures
900 seconds
Malware Config
Targets
-
- Target clicketSetup.exe
- Size 67.5MB
- SHA256 1dbb31a7bf189c8c1f07461e0623a034c31f381c24c9c679b9d9daa807b7c848
- MD5 ce1ff78842b0dbd32fe53ca1188c09ea
- SHA1 d03230b1b929ef1066cd683bad1fb6bae3427898
- SHA512 93225b98564466727ca910df62894f2da4b837ab6c92d2dafb4e7ed2b0f85eab49ec8aa355d1b786f2247c5fcfdf11a3db71d17ff9c92f289db77c281060b57f
- SSDEEP 1572864:lXKKcDBGqU8ctMpD952mRnREv0m44MG3nN8r0ydl7Pm+nyqJIc:9KB8qoep552ERPQMi8rjd1Pm+n9Ic
- TLSH T1CCF7337BF2E8A42ECD6A05308772D025D97B6AA174FECC9947E8050DCB255603E2E737
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.