General
- Target Obsidian-Setup.exe
- Size 93.6MB
- Sample260815-a397dawbpa
- SHA256 200afe0debbdfc1f4713c35e7b67f2453007a4434eb33ec09d83795532ae201d
- MD5 fa75d9c58cededd0730fdeaf22b74ff3
- SHA1 06eb60b4b43ca8012824474a449214499ed0676b
- SHA512 e1cb3933967fad7a933a4dfbc46b31028cc5cefdc8f1512bd3afa4d5f4c42a14af4753ca539ed36d49fb7f9a55052c63d048b230e71c08f5018aa3c29df0f699
- SSDEEP 1572864:XY2um4Ndc20r+jpm4L7J0ALujnt/g5CFZtJttVyt7UQnhoDO2wGuMqtlPw2VjtvD:XYTm4PvtDJLujqCH1yVN6DATMN6jFOk
- TLSH T1532833A4659B2051C3C1EC3B665909DF03D4EF21B5B37F2D4E6F77BAB3B29218898085
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Obsidian-Setup.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
Obsidian-Setup.exe
Resource
win10ltsc2021-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral3
Sample
Obsidian-Setup.exe
Resource
win11-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral4
Sample
Obsidian-Setup.exe
Resource
win11ltsc2024-20260710-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target Obsidian-Setup.exe
- Size 93.6MB
- SHA256 200afe0debbdfc1f4713c35e7b67f2453007a4434eb33ec09d83795532ae201d
- MD5 fa75d9c58cededd0730fdeaf22b74ff3
- SHA1 06eb60b4b43ca8012824474a449214499ed0676b
- SHA512 e1cb3933967fad7a933a4dfbc46b31028cc5cefdc8f1512bd3afa4d5f4c42a14af4753ca539ed36d49fb7f9a55052c63d048b230e71c08f5018aa3c29df0f699
- SSDEEP 1572864:XY2um4Ndc20r+jpm4L7J0ALujnt/g5CFZtJttVyt7UQnhoDO2wGuMqtlPw2VjtvD:XYTm4PvtDJLujqCH1yVN6DATMN6jFOk
- TLSH T1532833A4659B2051C3C1EC3B665909DF03D4EF21B5B37F2D4E6F77BAB3B29218898085
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.