General
- Target setup.exe
- Size 3.9MB
- Sample260809-lpen4avekd
- SHA256 c4fd1f77a07d0298ad669c4be79b921a8a0fdcecf2641c89c87d729323039bf8
- MD5 0f50d6fc19e1f823f284783c14a45ac1
- SHA1 c4bb729b1c04321082b32f8239d0ac8b49b9ebac
- SHA512 eb1a2eba3679d515918e8aea4802fd3b38ccab7eb5a982920720c91e56aefc52d263482a747328fe009775b5f810e61918bbe9ec0cc70c231f6f6236354bee1b
- SSDEEP 98304:gf7wCQInrje/CAVMJy1W/MSQ5RTFYM5L9N:gfn6/VSl/MSQ5FGuLX
- TLSH T15A163382F3931439F41009355E529578AE13FBB619D4102A1EBCDB5F0FBD287B9F6AA0
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
setup.exe
Resource
win10v2004-20260513-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target setup.exe
- Size 3.9MB
- SHA256 c4fd1f77a07d0298ad669c4be79b921a8a0fdcecf2641c89c87d729323039bf8
- MD5 0f50d6fc19e1f823f284783c14a45ac1
- SHA1 c4bb729b1c04321082b32f8239d0ac8b49b9ebac
- SHA512 eb1a2eba3679d515918e8aea4802fd3b38ccab7eb5a982920720c91e56aefc52d263482a747328fe009775b5f810e61918bbe9ec0cc70c231f6f6236354bee1b
- SSDEEP 98304:gf7wCQInrje/CAVMJy1W/MSQ5RTFYM5L9N:gfn6/VSl/MSQ5FGuLX
- TLSH T15A163382F3931439F41009355E529578AE13FBB619D4102A1EBCDB5F0FBD287B9F6AA0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.