General
- Target RMG-Setup-Windows64-v0.9.0.exe
- Size 73.0MB
- Sample260809-cnlatastdz
- SHA256 e51202627ab3f738234c2fb5e5c28f57966269b803797ca83abeab39f6b58226
- MD5 c300aba272cc47f113614b17d5297cb0
- SHA1 0720153190765a13ee1aa425850cb5eaa9815816
- SHA512 33cbe6d1f660c9a719e857093a99b37a087a33748184cfa969e163dce5f9d364356173f39fd7de7609579b672345217d621395923858dfbde67e31542b2cb63e
- SSDEEP 1572864:hi59+gnxK/XwNOqAAsWc1Jw1wKnIzgENJmLp/25udW:h4wexkXwN5AAV9aKa1g25udW
- TLSH T1D8F7333BB19F663DE45D043A36336239193F792198368C42DAE48C5CCF169712E3FA96
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
RMG-Setup-Windows64-v0.9.0.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target RMG-Setup-Windows64-v0.9.0.exe
- Size 73.0MB
- SHA256 e51202627ab3f738234c2fb5e5c28f57966269b803797ca83abeab39f6b58226
- MD5 c300aba272cc47f113614b17d5297cb0
- SHA1 0720153190765a13ee1aa425850cb5eaa9815816
- SHA512 33cbe6d1f660c9a719e857093a99b37a087a33748184cfa969e163dce5f9d364356173f39fd7de7609579b672345217d621395923858dfbde67e31542b2cb63e
- SSDEEP 1572864:hi59+gnxK/XwNOqAAsWc1Jw1wKnIzgENJmLp/25udW:h4wexkXwN5AAV9aKa1g25udW
- TLSH T1D8F7333BB19F663DE45D043A36336239193F792198368C42DAE48C5CCF169712E3FA96
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.