General
- Target ParseMEUploader.exe
- Size 149KB
- Sample260816-m933vshr7v
- SHA256 9a657c1ba47aac368f59d668834b3a27b2c762295c8dad8a338bb6e90565f26e
- MD5 e88d03c54c893e9ef38e84cfbca19482
- SHA1 40519d133baf6a596d21496b6fc81a85514c66f5
- SHA512 4612fde73689dfee322f75b2083c953bc267f396673dc48fd2f6fb2dcf3cc65bca6308f1ead48d04cd0f92b8feec5aa2f52a0bf7cf8bb4d230c66bb5009db1fb
- SSDEEP 3072:MiRnf5Lq7cgXB/aI+2USHziTCIi2V57fgD9WTy:xf5O7cgXB/GSTin69
- TLSH T15DE35B90B3ED5072E3FED2B9647A0211727A7961A806C61CF9AA50DF1D31784C2B5F3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ParseMEUploader.exe
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
ParseMEUploader.exe
Resource
win11ltsc2024-20260709-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target ParseMEUploader.exe
- Size 149KB
- SHA256 9a657c1ba47aac368f59d668834b3a27b2c762295c8dad8a338bb6e90565f26e
- MD5 e88d03c54c893e9ef38e84cfbca19482
- SHA1 40519d133baf6a596d21496b6fc81a85514c66f5
- SHA512 4612fde73689dfee322f75b2083c953bc267f396673dc48fd2f6fb2dcf3cc65bca6308f1ead48d04cd0f92b8feec5aa2f52a0bf7cf8bb4d230c66bb5009db1fb
- SSDEEP 3072:MiRnf5Lq7cgXB/aI+2USHziTCIi2V57fgD9WTy:xf5O7cgXB/GSTin69
- TLSH T15DE35B90B3ED5072E3FED2B9647A0211727A7961A806C61CF9AA50DF1D31784C2B5F3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.