General
- Target ICBCClientSetup.exe
- Size 7.0MB
- Sample260813-pnhadayvgw
- SHA256 019503d2c6fd37e55ad25b5d5d457e253d65d0710b88cd4c4a1c5f0440c53861
- MD5 3ad4879061d23c9f40564afa79f4784e
- SHA1 901fe4a4a051caa718a8654b3dfdc9cc356399d4
- SHA512 98208ab96f0f341981d694ddcc8e4b7e6a0a8f9391ad3f1492b0d74d8ce94ca766ed2d5a45696a844db82af3a7d1d57ca0334be61ca4dd1478cfd560226cabea
- SSDEEP 196608:yiZsuKAPTLqhwqF+aFoe89KZweHuKa09XRpqOnZq9w:LmuKAPTEiG89KZwKa09XnZKw
- TLSH T1EB763336B5C78036D5B74D70DCF70BA4A7AAF4A76771E4DFA3A823041BB12C94A31621
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ICBCClientSetup.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
ICBCClientSetup.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target ICBCClientSetup.exe
- Size 7.0MB
- SHA256 019503d2c6fd37e55ad25b5d5d457e253d65d0710b88cd4c4a1c5f0440c53861
- MD5 3ad4879061d23c9f40564afa79f4784e
- SHA1 901fe4a4a051caa718a8654b3dfdc9cc356399d4
- SHA512 98208ab96f0f341981d694ddcc8e4b7e6a0a8f9391ad3f1492b0d74d8ce94ca766ed2d5a45696a844db82af3a7d1d57ca0334be61ca4dd1478cfd560226cabea
- SSDEEP 196608:yiZsuKAPTLqhwqF+aFoe89KZweHuKa09XRpqOnZq9w:LmuKAPTEiG89KZwKa09XnZKw
- TLSH T1EB763336B5C78036D5B74D70DCF70BA4A7AAF4A76771E4DFA3A823041BB12C94A31621
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.