General
- Target XTweaks.Free.Setup.1.0.3.exe
- Size 132.6MB
- Sample260822-qlr78sfb42
- SHA256 99a86b53c879ad17ffc62d4d9ef587e9ff4950c4e5f199a19f4c853837483fc5
- MD5 345051724646cf12572521a7e9fa2133
- SHA1 868bbb58d1d39cd3c1f19cb692f46fcfed9fdfd9
- SHA512 2b9e7fd3a24b3fc4471d76e931c1189c7b11e9249eb8e5a9bbc5a44c68a2d10df8e95c444a456efd4b2c424fb79e67b926c24c818f4c2841cd1f79711ab06476
- SSDEEP 3145728:z7e4DoxftdrJmIoFyHQp4XXgelyI/0A/3/vHLosEWv/:m4DYzrJ3ioQpWRVcA/3/vWWv/
- TLSH T1BB683327B56D18FDC1C4FBFC822E0655D10F6C8E6A4A21A331B991FAE5F8C035E159CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
XTweaks.Free.Setup.1.0.3.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
XTweaks.Free.Setup.1.0.3.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target XTweaks.Free.Setup.1.0.3.exe
- Size 132.6MB
- SHA256 99a86b53c879ad17ffc62d4d9ef587e9ff4950c4e5f199a19f4c853837483fc5
- MD5 345051724646cf12572521a7e9fa2133
- SHA1 868bbb58d1d39cd3c1f19cb692f46fcfed9fdfd9
- SHA512 2b9e7fd3a24b3fc4471d76e931c1189c7b11e9249eb8e5a9bbc5a44c68a2d10df8e95c444a456efd4b2c424fb79e67b926c24c818f4c2841cd1f79711ab06476
- SSDEEP 3145728:z7e4DoxftdrJmIoFyHQp4XXgelyI/0A/3/vHLosEWv/:m4DYzrJ3ioQpWRVcA/3/vWWv/
- TLSH T1BB683327B56D18FDC1C4FBFC822E0655D10F6C8E6A4A21A331B991FAE5F8C035E159CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.