General
- Target winiso.exe
- Size 6.7MB
- Sample260804-t6ednaam6z
- SHA256 338c439af0954b42d3cfd92811f06b5a639e3086b75d78d62c902d17595374a6
- MD5 a8589b413edc8032d9676714521a8dda
- SHA1 c8dbfd4a73fa5a827a35e1c52542bb05588c6b8e
- SHA512 93bf7293478fe07ebdae3047274886e6ac4f97ebbeaa15afaeee0559982ed0b555bdeb5bbcc03d2626224ca1f7618bd6370c966a727b2cb8d9cdb0014dff7503
- SSDEEP 196608:/TGonqYQnelFLLbCGRt6Hqf0LC9sV7DuYHemav0zd+Z7CatBB0rs:/C2JRFLLxySf2+Syvi+4uf
- TLSH T1B866330453F65B53F4DA21B12ABBA0341537FA1771F4EB9662941336B83E32E4E2F246
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
winiso.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
winiso.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target winiso.exe
- Size 6.7MB
- SHA256 338c439af0954b42d3cfd92811f06b5a639e3086b75d78d62c902d17595374a6
- MD5 a8589b413edc8032d9676714521a8dda
- SHA1 c8dbfd4a73fa5a827a35e1c52542bb05588c6b8e
- SHA512 93bf7293478fe07ebdae3047274886e6ac4f97ebbeaa15afaeee0559982ed0b555bdeb5bbcc03d2626224ca1f7618bd6370c966a727b2cb8d9cdb0014dff7503
- SSDEEP 196608:/TGonqYQnelFLLbCGRt6Hqf0LC9sV7DuYHemav0zd+Z7CatBB0rs:/C2JRFLLxySf2+Syvi+4uf
- TLSH T1B866330453F65B53F4DA21B12ABBA0341537FA1771F4EB9662941336B83E32E4E2F246
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.