General
- Target MasterstrapSetup.exe
- Size 7.9MB
- Sample260809-rgfjbagk31
- SHA256 a12304d3ed387954d8acfe31b29abb1674c0708b5abcf69d8cb04f22c3fcb3c0
- MD5 62d1e62a0751891b682007a8aaed6cfe
- SHA1 615d42e5b25de979475757361f3bf9da20ab00cb
- SHA512 b9bce3566a5402745b68ae79581aac8844d24a0d917aa4774897205ea9123458e60f68b45a21b1652f30dc26e886734eae5c719c4ecf44e3b95d8fdcd5bdb6b5
- SSDEEP 196608:6UqbkzuSGADk27gxloYiwZ28sGJ7FLT1G1tbAUqCiNM0oIk0:5uUDXcwcBsGJ7F5e1ulZoc
- TLSH T141863312B3DC0AA2E5F78B35D57108409732BE616BA7EADF276054AA2DF17C09C71363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
MasterstrapSetup.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
MasterstrapSetup.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target MasterstrapSetup.exe
- Size 7.9MB
- SHA256 a12304d3ed387954d8acfe31b29abb1674c0708b5abcf69d8cb04f22c3fcb3c0
- MD5 62d1e62a0751891b682007a8aaed6cfe
- SHA1 615d42e5b25de979475757361f3bf9da20ab00cb
- SHA512 b9bce3566a5402745b68ae79581aac8844d24a0d917aa4774897205ea9123458e60f68b45a21b1652f30dc26e886734eae5c719c4ecf44e3b95d8fdcd5bdb6b5
- SSDEEP 196608:6UqbkzuSGADk27gxloYiwZ28sGJ7FLT1G1tbAUqCiNM0oIk0:5uUDXcwcBsGJ7F5e1ulZoc
- TLSH T141863312B3DC0AA2E5F78B35D57108409732BE616BA7EADF276054AA2DF17C09C71363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.