General
- Target setup.exe
- Size 191.0MB
- Sample260815-c2v26sdd78
- SHA256 ca95388b24a4861ba8e29b82a6a0003ed649cb2f5f6c5b63d470215c12ae5e77
- MD5 d33c08039487a05b92e794a8a6ec60e9
- SHA1 e0266ec1b84f7ffc433040bce428d6dd3ec02f1a
- SHA512 1b3365e635311e1daeaa4e40d4e526e0bd80c152ada4899f46f87451c44cef04029f85b7a51eba6dbb7b47269486658943be6d2e3f76fc6919a73f605127e2c4
- SSDEEP 3145728:BP6ofoOd0jGV601iQlZit0kuu23u+kaL9D0AXneW6DJHPA8e6bhCI7Tu/Cx2h9uX:BP6Id00601iwieuR+kw9DazDJH4r+/VV
- TLSH T1ECA83360B25B85A5C06276F3A78497BC05206F759020D74FD6EA7D8DAE39CDBCE0878C
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
setup.exe
Resource
win10v2004-20260513-en
30 signatures
150 seconds
Malware Config
Targets
-
- Target setup.exe
- Size 191.0MB
- SHA256 ca95388b24a4861ba8e29b82a6a0003ed649cb2f5f6c5b63d470215c12ae5e77
- MD5 d33c08039487a05b92e794a8a6ec60e9
- SHA1 e0266ec1b84f7ffc433040bce428d6dd3ec02f1a
- SHA512 1b3365e635311e1daeaa4e40d4e526e0bd80c152ada4899f46f87451c44cef04029f85b7a51eba6dbb7b47269486658943be6d2e3f76fc6919a73f605127e2c4
- SSDEEP 3145728:BP6ofoOd0jGV601iQlZit0kuu23u+kaL9D0AXneW6DJHPA8e6bhCI7Tu/Cx2h9uX:BP6Id00601iwieuR+kw9DazDJH4r+/VV
- TLSH T1ECA83360B25B85A5C06276F3A78497BC05206F759020D74FD6EA7D8DAE39CDBCE0878C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops desktop.ini file(s)
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1