General
- Target Install.exe
- Size 4.1MB
- Sample260817-dv5tgadr2s
- SHA256 807e72c85ab94278d9e0bb16ce82c18762a609092ab9d35305db042d61cdddfd
- MD5 453bee2b8e8a448bdb7ac22c1047230b
- SHA1 0f9c74d4b3658e2beb438a5bdef8ac73294e8f52
- SHA512 a2fdf9176446617aadd645a05378eff7716d9855a36e13d1e4081d3695cad2bd8cd4c8ad7b773b7609c1feeb236615e466928b812234ca0ab17b745e9c958fac
- SSDEEP 98304:Sh1v9HjyVq2cnhtjxpNpaL8M+RzOtf6RbWJ2JncryoV7nqStUwifpceyK:STvRyVq5nnTNpa1YJxoxF6
- TLSH T1AB1623BC2BB4CB14DA29037904D8D5B04BEA6FE1B187D352D8E97EB3357336885215CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Install.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
Install.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target Install.exe
- Size 4.1MB
- SHA256 807e72c85ab94278d9e0bb16ce82c18762a609092ab9d35305db042d61cdddfd
- MD5 453bee2b8e8a448bdb7ac22c1047230b
- SHA1 0f9c74d4b3658e2beb438a5bdef8ac73294e8f52
- SHA512 a2fdf9176446617aadd645a05378eff7716d9855a36e13d1e4081d3695cad2bd8cd4c8ad7b773b7609c1feeb236615e466928b812234ca0ab17b745e9c958fac
- SSDEEP 98304:Sh1v9HjyVq2cnhtjxpNpaL8M+RzOtf6RbWJ2JncryoV7nqStUwifpceyK:STvRyVq5nnTNpa1YJxoxF6
- TLSH T1AB1623BC2BB4CB14DA29037904D8D5B04BEA6FE1B187D352D8E97EB3357336885215CA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of NtSetInformationThreadHideFromDebugger