General
- Target Setup.exe
- Size 5.9MB
- Sample260817-dxmexasybv
- SHA256 4cee6cb68d3ee14b9b6f12d6c0287f69827295132a797133188105ba48929757
- MD5 15ce81700d3a08b1b7c0118b85959cb7
- SHA1 4ee1a125b2f743533a31b10c9749d0abfad348a4
- SHA512 1147a6f0a37e1ddf35a7e35d6bf9ba1a75b08d444e39e13492f0b7d588dc651e5f70c19276dfe841680785f2553e4ce0bbffb2543ac615c12b0b912fa4ae8efb
- SSDEEP 49152:jGxLW7vYVG3crWqnQXFMr2j4SJUn6QaJjcmE0vkw436QghuogPQLEnaBhwID6tgo:jGxLYvYoMrOFMr2LJf/tcmE0v14KQg5
- TLSH T183567C104C5C12D7D25F07B6486B560E8BF293A3BAC3C14B065F94BAE1BABE0546B5CF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Setup.exe
Resource
win10ltsc2021-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
Setup.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral3
Sample
Setup.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target Setup.exe
- Size 5.9MB
- SHA256 4cee6cb68d3ee14b9b6f12d6c0287f69827295132a797133188105ba48929757
- MD5 15ce81700d3a08b1b7c0118b85959cb7
- SHA1 4ee1a125b2f743533a31b10c9749d0abfad348a4
- SHA512 1147a6f0a37e1ddf35a7e35d6bf9ba1a75b08d444e39e13492f0b7d588dc651e5f70c19276dfe841680785f2553e4ce0bbffb2543ac615c12b0b912fa4ae8efb
- SSDEEP 49152:jGxLW7vYVG3crWqnQXFMr2j4SJUn6QaJjcmE0vkw436QghuogPQLEnaBhwID6tgo:jGxLYvYoMrOFMr2LJf/tcmE0v14KQg5
- TLSH T183567C104C5C12D7D25F07B6486B560E8BF293A3BAC3C14B065F94BAE1BABE0546B5CF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1