General
- Target CDPSupport.exe
- Size 16.5MB
- Sample260812-prskhsxala
- SHA256 ad63d0363cec1aa7907c514a9e04ec4aa71b4060fed2cbf5c105427b840d4141
- MD5 284f467d3d0e7ec53a73a689d12831b7
- SHA1 ba2e82df1355e519fd9c2d94d0f88f948f43f886
- SHA512 42767730509fb3edd028da5e2542b6335ab37705e43a8dfb26083ad2d62ff5789b680e33716318cde1dc70bee28afad4b0b9dbb0fc6ff735361c29e45f719c8e
- SSDEEP 393216:az5D1OJTiiD876PHrXhEuPUVsNXAK2XHCcuPNDfPPPCJBlwGS0URS:yF12iig8Lm62XHCDPNDfPCryGS5RS
- TLSH T17A073310F389B874E0772A3625B59A785115BF503F2DE283277839A859726C3BB31F1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
CDPSupport.exe
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
CDPSupport.exe
Resource
win11ltsc2024-20260709-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target CDPSupport.exe
- Size 16.5MB
- SHA256 ad63d0363cec1aa7907c514a9e04ec4aa71b4060fed2cbf5c105427b840d4141
- MD5 284f467d3d0e7ec53a73a689d12831b7
- SHA1 ba2e82df1355e519fd9c2d94d0f88f948f43f886
- SHA512 42767730509fb3edd028da5e2542b6335ab37705e43a8dfb26083ad2d62ff5789b680e33716318cde1dc70bee28afad4b0b9dbb0fc6ff735361c29e45f719c8e
- SSDEEP 393216:az5D1OJTiiD876PHrXhEuPUVsNXAK2XHCcuPNDfPPPCJBlwGS0URS:yF12iig8Lm62XHCDPNDfPCryGS5RS
- TLSH T17A073310F389B874E0772A3625B59A785115BF503F2DE283277839A859726C3BB31F1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops file in System32 directory