General
- Target WFDownloaderApp-BETA-64bit.exe
- Size 64.6MB
- Sample260810-d93bwszhjd
- SHA256 5e35c79305803dfab97b98e8fe1c02760c290146107993765f1f812220a9fe27
- MD5 d9690409b2a72d71514aa00d81f09ec7
- SHA1 a26d0bcb879324612182228d8a031c05a6cafc0d
- SHA512 842e7b9b707c744722e2fc3bb8368e7081a2ca80d33acd6998f4a60e50bb8e3b2e23356c95a723e914794af93d60ba5b95f74ab8c342294a668f4f9452602c2c
- SSDEEP 1572864:xog1vwcDiRm3Tp+VmiOVIXH+VCi+s0yQUX+fNQ3:xogjikTQiVwO0C8NQ3
- TLSH T124E733D88DB5981CC29634FA9B161DC5094A5C10019BE87311FF34938ABBD97EEE42BF
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
WFDownloaderApp-BETA-64bit.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target WFDownloaderApp-BETA-64bit.exe
- Size 64.6MB
- SHA256 5e35c79305803dfab97b98e8fe1c02760c290146107993765f1f812220a9fe27
- MD5 d9690409b2a72d71514aa00d81f09ec7
- SHA1 a26d0bcb879324612182228d8a031c05a6cafc0d
- SHA512 842e7b9b707c744722e2fc3bb8368e7081a2ca80d33acd6998f4a60e50bb8e3b2e23356c95a723e914794af93d60ba5b95f74ab8c342294a668f4f9452602c2c
- SSDEEP 1572864:xog1vwcDiRm3Tp+VmiOVIXH+VCi+s0yQUX+fNQ3:xogjikTQiVwO0C8NQ3
- TLSH T124E733D88DB5981CC29634FA9B161DC5094A5C10019BE87311FF34938ABBD97EEE42BF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.