General
- Target vpsetup.exe
- Size 8.5MB
- Sample260814-c1lr4sshme
- SHA256 bd3f2933ad2912b9f77b2500a40eac1b5796df786cf7b7987573a1df870ba11e
- MD5 434fe4343d440e347c8f501709ea6e76
- SHA1 e858ef4623d8e026385ec5e9d736b9ffa57bf4eb
- SHA512 24ed9f767eadddce83fb0e2e1f15419865e4a7182dab1ae121ff7b52181edd2f990ccd77443d74c9959ffba358889d034fd70d1fc28b510796cfb024c2cb0628
- SSDEEP 196608:SEh/ZIfi65Zhxx/jvFYuxtkSrA8tR/2mjr9iVNJhxoAluuHWmj0fTaYl:SGIK65vDjdRiSD52mPuNriAP0fWS
- TLSH T14A96337836DAA16BE16285F8AC774E199108539845EB463FBBF48AD44B302CD34F583F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
vpsetup.exe
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
vpsetup.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target vpsetup.exe
- Size 8.5MB
- SHA256 bd3f2933ad2912b9f77b2500a40eac1b5796df786cf7b7987573a1df870ba11e
- MD5 434fe4343d440e347c8f501709ea6e76
- SHA1 e858ef4623d8e026385ec5e9d736b9ffa57bf4eb
- SHA512 24ed9f767eadddce83fb0e2e1f15419865e4a7182dab1ae121ff7b52181edd2f990ccd77443d74c9959ffba358889d034fd70d1fc28b510796cfb024c2cb0628
- SSDEEP 196608:SEh/ZIfi65Zhxx/jvFYuxtkSrA8tR/2mjr9iVNJhxoAluuHWmj0fTaYl:SGIK65vDjdRiSD52mPuNriAP0fWS
- TLSH T14A96337836DAA16BE16285F8AC774E199108539845EB463FBBF48AD44B302CD34F583F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1