General
- Target setup.exe
- Size 2.4MB
- Sample260820-serz1azbpf
- SHA256 73200f209e6c44c7a933aec17de44f5ea2c1cf9da1e9d29c9c845a77a253f7cf
- MD5 54175c06e67c581b902af3ed73541302
- SHA1 9757eb42286da316d7b86645e86a88aa3f3d9c54
- SHA512 af173841869113e8cc76a2f80d732efdbf19e49296970af9f9b4f8641606e71ef1ce8c701ce8a8b044189e4be6448aca8acdb22ca6e27f48b1df4b7517d71071
- SSDEEP 49152:26+HfxVnrO5DvkwGvVaxi9fXItvINovhQPP4Lc4CRjCR/lOVilx88hb5OY8aI1CS:3+HffaDvk1mofYh/TI4yejOVYKor8voW
- TLSH T1AFB52303F7C388BAFA2D177449254048AD6A7D791CF424BA2DBCEF4E09357D258B5EA0
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
setup.exe
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target setup.exe
- Size 2.4MB
- SHA256 73200f209e6c44c7a933aec17de44f5ea2c1cf9da1e9d29c9c845a77a253f7cf
- MD5 54175c06e67c581b902af3ed73541302
- SHA1 9757eb42286da316d7b86645e86a88aa3f3d9c54
- SHA512 af173841869113e8cc76a2f80d732efdbf19e49296970af9f9b4f8641606e71ef1ce8c701ce8a8b044189e4be6448aca8acdb22ca6e27f48b1df4b7517d71071
- SSDEEP 49152:26+HfxVnrO5DvkwGvVaxi9fXItvINovhQPP4Lc4CRjCR/lOVilx88hb5OY8aI1CS:3+HffaDvk1mofYh/TI4yejOVYKor8voW
- TLSH T1AFB52303F7C388BAFA2D177449254048AD6A7D791CF424BA2DBCEF4E09357D258B5EA0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.