General
- Target setup.exe
- Size 5.1MB
- Sample260823-h3fa1ahf45
- SHA256 ef6652309943514f576739c4a3387004da96a368622c2fbb843330393b99acc9
- MD5 4e46600100e4a402e764beee73cba863
- SHA1 2dfaf1a8b5e8ccec1af7c0f71e35315d2a145bfc
- SHA512 5470e26c597237b6f5d65f2c13f898eb9e74c3cd7306377759a8b2a9332ae5266d04732777652bbb9eae809bf302b3f9ee6af07f374fa1423ee03adb800d3211
- SSDEEP 98304:jf7wCQInrje/CAVMJy1Wzsf0TtsPIacAgLfTpN:jfn6/VSlzAkt0I9A83
- TLSH T12B463301F3C32036E45508389D1795B86D13E6B669E1512A1EF8DBCF0BB9187B9FB6B0
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
setup.exe
Resource
win10v2004-20260513-en
22 signatures
150 seconds
Malware Config
Targets
-
- Target setup.exe
- Size 5.1MB
- SHA256 ef6652309943514f576739c4a3387004da96a368622c2fbb843330393b99acc9
- MD5 4e46600100e4a402e764beee73cba863
- SHA1 2dfaf1a8b5e8ccec1af7c0f71e35315d2a145bfc
- SHA512 5470e26c597237b6f5d65f2c13f898eb9e74c3cd7306377759a8b2a9332ae5266d04732777652bbb9eae809bf302b3f9ee6af07f374fa1423ee03adb800d3211
- SSDEEP 98304:jf7wCQInrje/CAVMJy1Wzsf0TtsPIacAgLfTpN:jfn6/VSlzAkt0I9A83
- TLSH T12B463301F3C32036E45508389D1795B86D13E6B669E1512A1EF8DBCF0BB9187B9FB6B0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.