General
- Target 保密文件浏览器.exe
- Size 11.7MB
- Sample260805-plj17afq2s
- SHA256 43b79ae0f1fc1311b7d61c1b48d6e73c2ddd89c7ce469aac8d0e7f0217f3816f
- MD5 b266ce25d37332ead9bb528ae6c0b049
- SHA1 55fd5ab79ea8538a3b74b5379b354e4a39044f20
- SHA512 31b0a641255fc003da20df023dd79c4eb23704562adc1ce20067d258d53e801f7d562ae718ad31aec44b4c448b4bb788836ed2f3318522ead0a2af9227f493e3
- SSDEEP 196608:cx/hWuy4Kh3OFO+2XFlUW3isi2UQ37UFqKsQl4yvrsbiuPQwfLIBSBp:cx5WuQh3kc4ijUk7U11le9QyIyp
- TLSH T160C6233FF28BA53EE06E563676B6D210583B7A6065124C1296ECF88CCF255701E3E787
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
保密文件浏览器.exe
Resource
win10v2004-20260513-en
21 signatures
300 seconds
Malware Config
Targets
-
- Target 保密文件浏览器.exe
- Size 11.7MB
- SHA256 43b79ae0f1fc1311b7d61c1b48d6e73c2ddd89c7ce469aac8d0e7f0217f3816f
- MD5 b266ce25d37332ead9bb528ae6c0b049
- SHA1 55fd5ab79ea8538a3b74b5379b354e4a39044f20
- SHA512 31b0a641255fc003da20df023dd79c4eb23704562adc1ce20067d258d53e801f7d562ae718ad31aec44b4c448b4bb788836ed2f3318522ead0a2af9227f493e3
- SSDEEP 196608:cx/hWuy4Kh3OFO+2XFlUW3isi2UQ37UFqKsQl4yvrsbiuPQwfLIBSBp:cx5WuQh3kc4ijUk7U11le9QyIyp
- TLSH T160C6233FF28BA53EE06E563676B6D210583B7A6065124C1296ECF88CCF255701E3E787
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory