General
- Target photostagesetup_sv.exe
- Size 3.7MB
- Sample260814-c2nm4ashpd
- SHA256 6674057fbdf06e2509dfe7ae6d243289615cc8f8a547de2f6d3fea1ae47be9aa
- MD5 fbafaf2375937a2fd422ab958c2ceef3
- SHA1 a585ce8282609b5f2385a44c197b732206658c9a
- SHA512 cce9d43738386c5afa97053822397e0769720cb0cc902558aa5ce9fc7a1d6f4d62fb730463818fcc736ecda3f58bd0d7ce6ada94c3b6e91c61713f204656be7e
- SSDEEP 98304:zdmIMkJI6CLjzjqV5WMa3j90/FOjlV9UxNrqXo:ZFJI69iv94Ojf9kN6o
- TLSH T1350633E7CE94E049D312ADB602D5BB92B7147C7D4A83CC7DB78FD2946B12398A58301B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
photostagesetup_sv.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
photostagesetup_sv.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target photostagesetup_sv.exe
- Size 3.7MB
- SHA256 6674057fbdf06e2509dfe7ae6d243289615cc8f8a547de2f6d3fea1ae47be9aa
- MD5 fbafaf2375937a2fd422ab958c2ceef3
- SHA1 a585ce8282609b5f2385a44c197b732206658c9a
- SHA512 cce9d43738386c5afa97053822397e0769720cb0cc902558aa5ce9fc7a1d6f4d62fb730463818fcc736ecda3f58bd0d7ce6ada94c3b6e91c61713f204656be7e
- SSDEEP 98304:zdmIMkJI6CLjzjqV5WMa3j90/FOjlV9UxNrqXo:ZFJI69iv94Ojf9kN6o
- TLSH T1350633E7CE94E049D312ADB602D5BB92B7147C7D4A83CC7DB78FD2946B12398A58301B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.