General
- Target ZorbsSetup-1.0.0.exe
- Size 24.2MB
- Sample260813-aba8zavyhv
- SHA256 2568f607d4f84db26d8ff431f3312d1f2ac8a47479d0624dfd79386842f97f45
- MD5 bb57725740569d36645965a0ee81beff
- SHA1 b86d08fe365a52a394f9d5a83bebdb4c07f3327a
- SHA512 1323eb555c3b3ac2b63261cb0113378805c407f363ee217432445752f826b0000d90ad2eecf8e12b1b48249c75ce3e8477843931cbdfe7b1b03897b1249169e4
- SSDEEP 786432:nX9J/0Z8XHGWxuGTfFKaIpbJCpHES9+ZoDobi:X9J/0Y1LKaIpopp9ebi
- TLSH T1FE47333FB24B643DE02A563579B2E221953B7761B4168C1297E4C89CCF264701E3FBDA
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
ZorbsSetup-1.0.0.exe
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target ZorbsSetup-1.0.0.exe
- Size 24.2MB
- SHA256 2568f607d4f84db26d8ff431f3312d1f2ac8a47479d0624dfd79386842f97f45
- MD5 bb57725740569d36645965a0ee81beff
- SHA1 b86d08fe365a52a394f9d5a83bebdb4c07f3327a
- SHA512 1323eb555c3b3ac2b63261cb0113378805c407f363ee217432445752f826b0000d90ad2eecf8e12b1b48249c75ce3e8477843931cbdfe7b1b03897b1249169e4
- SSDEEP 786432:nX9J/0Z8XHGWxuGTfFKaIpbJCpHES9+ZoDobi:X9J/0Y1LKaIpopp9ebi
- TLSH T1FE47333FB24B643DE02A563579B2E221953B7761B4168C1297E4C89CCF264701E3FBDA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.