General
- Target Setup-ImgBurn-2-5-8-0-954005.zip
- Size 17.9MB
- Sample260815-nfjmsswsb1
- SHA256 ef3f82ab769f9fc17877df59566e5349bf4b1e30ca25960d38330d6752797ba3
- MD5 e2af35246bbe83552f19b239d4277bd6
- SHA1 097311610fac7404179afe93470a87cda62c5243
- SHA512 b3103ca5e94a89b77afdef8af025c613bbd15f44cf8a99492ccfa583ba38b2485c106b2917d704e36311b6f34f9708b8fb776ee327f56a8f20e57721ca10305a
- SSDEEP 393216:SKuUXreBy4gYPfvvSU8PEulpOtM92PN2sf7tYMXTds/Bhpx:X9XkyofvvSU8stM94NLDrX2/B1
- TLSH T1D6173320449BD4EC27DD432EAB3CC863AAD5957F752D7024165FCDC0A883F5822AEE5E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Setup-ImgBurn-2-5-8-0-954005.zip
Resource
win10v2004-20260513-en
24 signatures
900 seconds
Behavioral task
behavioral2
Sample
Setup-ImgBurn-2-5-8-0-954005.zip
Resource
win11ltsc2024-20260710-en
0 signatures
900 seconds
Malware Config
Targets
-
- Target Setup-ImgBurn-2-5-8-0-954005.zip
- Size 17.9MB
- SHA256 ef3f82ab769f9fc17877df59566e5349bf4b1e30ca25960d38330d6752797ba3
- MD5 e2af35246bbe83552f19b239d4277bd6
- SHA1 097311610fac7404179afe93470a87cda62c5243
- SHA512 b3103ca5e94a89b77afdef8af025c613bbd15f44cf8a99492ccfa583ba38b2485c106b2917d704e36311b6f34f9708b8fb776ee327f56a8f20e57721ca10305a
- SSDEEP 393216:SKuUXreBy4gYPfvvSU8PEulpOtM92PN2sf7tYMXTds/Bhpx:X9XkyofvvSU8stM94NLDrX2/B1
- TLSH T1D6173320449BD4EC27DD432EAB3CC863AAD5957F752D7024165FCDC0A883F5822AEE5E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1