General
- Target Installer-1.0.7.exe
- Size 9.8MB
- Sample260809-2ew4dswgnh
- SHA256 48f359326787a848b89d838a318d797c51fd7feeeee602fff5f46b9d3f7b53ce
- MD5 32e6c794181e84ec3ddb154ed5e65391
- SHA1 9a6f359a8ba80338cc83200e8b6b0b06a9d4e290
- SHA512 582171a6fa99246b4919f30c73e385aa26f55407dfab040188970aef9d7fb1ac12f1c3fd635efb8a5aebe484a0bc7c85be65a0ac2344ce8a95d4e1f64886425d
- SSDEEP 196608:/CIlL/mwLN9H3eeYbuN3VdC61kyGxyzriAZOLqJt6dl:awL/mINZePbtyviOt6d
- TLSH T182A6330377A623F5D076C93EEC92120D277278725F64EEEB1768EAB10E661C48E3E154
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Installer-1.0.7.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target Installer-1.0.7.exe
- Size 9.8MB
- SHA256 48f359326787a848b89d838a318d797c51fd7feeeee602fff5f46b9d3f7b53ce
- MD5 32e6c794181e84ec3ddb154ed5e65391
- SHA1 9a6f359a8ba80338cc83200e8b6b0b06a9d4e290
- SHA512 582171a6fa99246b4919f30c73e385aa26f55407dfab040188970aef9d7fb1ac12f1c3fd635efb8a5aebe484a0bc7c85be65a0ac2344ce8a95d4e1f64886425d
- SSDEEP 196608:/CIlL/mwLN9H3eeYbuN3VdC61kyGxyzriAZOLqJt6dl:awL/mINZePbtyviOt6d
- TLSH T182A6330377A623F5D076C93EEC92120D277278725F64EEEB1768EAB10E661C48E3E154
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL
Drops desktop.ini file(s)