General
- Target UpdateDrivers.exe
- Size 511KB
- Sample260809-r5228agp31
- SHA256 e0ea3f1d9f810689f4949b44ccb8a3e093baab9e01b9397c9562dac73291f881
- MD5 9f07307e816a6ab64a70066ee01812da
- SHA1 d38c0eac05202bb40d4bcd315a096d9f42c281f7
- SHA512 732b26808398ca76e6cd3c93a7df9a59d7fb8c315ad26246a55c4ff0d5ac1cc69b6df6e63687f37bef1cfbc222bf35354d3f605a8e9d6b586d0bc66ba6673a49
- SSDEEP 6144:KY21ZF+2ajmnYMiQHVEKv8IXR9gktkQuSrfijCeq6o84JPhWYbqPX3W8mt/Dej/m:KYCY5jmQGTVtoSrFX31WYb+3W5gVc
- TLSH T127B4C00237E4C92BEABE17B9F4B102015B79E14BA112DB8E78CC54F95F53380995276F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
UpdateDrivers.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
UpdateDrivers.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target UpdateDrivers.exe
- Size 511KB
- SHA256 e0ea3f1d9f810689f4949b44ccb8a3e093baab9e01b9397c9562dac73291f881
- MD5 9f07307e816a6ab64a70066ee01812da
- SHA1 d38c0eac05202bb40d4bcd315a096d9f42c281f7
- SHA512 732b26808398ca76e6cd3c93a7df9a59d7fb8c315ad26246a55c4ff0d5ac1cc69b6df6e63687f37bef1cfbc222bf35354d3f605a8e9d6b586d0bc66ba6673a49
- SSDEEP 6144:KY21ZF+2ajmnYMiQHVEKv8IXR9gktkQuSrfijCeq6o84JPhWYbqPX3W8mt/Dej/m:KYCY5jmQGTVtoSrFX31WYb+3W5gVc
- TLSH T127B4C00237E4C92BEABE17B9F4B102015B79E14BA112DB8E78CC54F95F53380995276F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE