General
- Target download.zip
- Size 6.0MB
- Sample260819-pha9watemg
- SHA256 306c9817da88f2c3c13f3635b3a877bfb0112d3983875f0977492ed3e734ad6a
- MD5 66b28a9ed820c4330b172ae3e9006ec4
- SHA1 aa94c2a7d5fee7e7ba420a24803ea00fb9e78cf2
- SHA512 5afd9fba6f0ee4dade63dad5e0c32cbd2b57f06cdb518d79c9835d72f731f5f901eb84510701915c8987839e8b049d35aa15c40d22377fb7e4d814b24321650e
- SSDEEP 98304:sVXnMntWoRfsFw+L6yjfqHu9L1Ee21rtnaq4cRYvQ0Sl3FWlCCjbqL63qa7mORdy:kXna7sOkdjfq0L1Ee2I8RYvkolxbqL6G
- TLSH T1815633581D5CE24E67CE3D609C25460CA4FE49F3ACBA4A2E4278DB4F7670CC505BE9A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
InstalaProgramadorTupa.msi
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
InstalaProgramadorTupa.msi
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Behavioral task
behavioral3
Sample
setup.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral4
Sample
setup.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target InstalaProgramadorTupa.msi
- Size 6.3MB
- SHA256 e7818bc830ef140c0155a7468e8cd848b6cb37666fb99cedd9ff7419b76202ad
- MD5 115d6d049815630b1a6702f3f9a75b5e
- SHA1 b0636f321458e07eac54106d8cda5ad419c8c912
- SHA512 9d22a8256bd0ef58bd29bb6d295bffbc753bc957df9730410392e8d12816308a29309095e4e0eb5ec24fb319dd97f47fbbefa096955d46a334e3e74a99178668
- SSDEEP 196608:klSuBwn6ChygvP09FfEkMBREqoKBsxo31dLYhFL:klpjhe0okxm1v0hF
- TLSH T1266633113AC8C736C1CA163099BAD729453E9D714F7182876325BBDE2FB2AC2537C786
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target setup.exe
- Size 484KB
- SHA256 d6fe46e5d357bd9000a4f1b6b27c1f80dc2b223302f70a00c1b4f615a3994a2f
- MD5 913fe60d566df403147e8163e79c5313
- SHA1 9c0f2c8f4fbd66a1775682a38307d22e014c94af
- SHA512 49cb09605b3f75a4abd6982c5d397e427d925c507f31ddb1a28ef8623ba3bf9de3d295fd9ef29562dc8fc6be6bc1718c15a8aa0436bc16b6fcd9dd66fa485aad
- SSDEEP 6144:6qIpd/w8ylWKxavR+dJ1oMBClrbMAo+nhmuFfvY0SHZvuD32TojDuUlXdpqeO:67IRWDvFa+nhmuF3Y0sc2TeDuUlXz
- TLSH T1AFB4E83515FC4136E4B391B08FE89137A679FC72273189AB12C1178E4A62EC2B96177F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.