General
- Target setup.exe
- Size 5.5MB
- Sample260808-mj1vtaveje
- SHA256 e58a1953bb7c3d250de3f5538bc541c403c3cc42a2b5438b8a2c81b7b4a5e348
- MD5 ce82411542fbbc8f32c1383f0e41faa6
- SHA1 7ded1e966a69f4ed6e84ea83815e7cb5f0872fae
- SHA512 737abb6ca271e75683b46cfaa32f5e9944e034651fb7ed94b93e9c584af2a7ebff8c6ed4300074444ea090895453f0099ac5eb436901d2a171610cc0f15bf2f9
- SSDEEP 98304:/f7wCQInrje/CAVMJy1Wvbjz5nq5Boygb4AuO+GHyztdKN:/fn6/VSlvbj1Yo7/qzLw
- TLSH T108463344E7E3143EE46149386D52A4BC2D22F7A616D455560FBCCBDF0EB41C3BCBAAA0
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
setup.exe
Resource
win10v2004-20260513-en
20 signatures
150 seconds
Malware Config
Targets
-
- Target setup.exe
- Size 5.5MB
- SHA256 e58a1953bb7c3d250de3f5538bc541c403c3cc42a2b5438b8a2c81b7b4a5e348
- MD5 ce82411542fbbc8f32c1383f0e41faa6
- SHA1 7ded1e966a69f4ed6e84ea83815e7cb5f0872fae
- SHA512 737abb6ca271e75683b46cfaa32f5e9944e034651fb7ed94b93e9c584af2a7ebff8c6ed4300074444ea090895453f0099ac5eb436901d2a171610cc0f15bf2f9
- SSDEEP 98304:/f7wCQInrje/CAVMJy1Wvbjz5nq5Boygb4AuO+GHyztdKN:/fn6/VSlvbj1Yo7/qzLw
- TLSH T108463344E7E3143EE46149386D52A4BC2D22F7A616D455560FBCCBDF0EB41C3BCBAAA0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.