General
- Target setup.exe
- Size 7.7MB
- Sample260828-2sndeaen6t
- SHA256 85f4b75fb467b097191cb54d581962cf74c7ebe8b195ff4a3cee50789b88fbcd
- MD5 0d1263d624092cde8c6478f36f6a07a3
- SHA1 154ae93b905ac75e4ab42ff6fc6552df14830da9
- SHA512 5d4bf3bde0a71262fcd4c36750fa44e3e1b0c3303008aee696d4d2c2f2284b57930c2333dfcede31f18e5466e7d93098757e28847dd668aea999a148950fbe78
- SSDEEP 98304:ivccAZPL4N3WlkqL6w9twz+IaZ7AMjwEQ6PCK9W1LKVGiBGCSMaEOmjpyKAsZPws:ivtAZj41WJ6pzqZjwT6p9XVO8wBGP
- TLSH T157863301A7C3487DDD65083A5C239C94AD56BBAA73C1781A3EF9CB8F09FBAC32535590
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
setup.exe
Resource
win10v2004-20260513-en
22 signatures
150 seconds
Malware Config
Targets
-
- Target setup.exe
- Size 7.7MB
- SHA256 85f4b75fb467b097191cb54d581962cf74c7ebe8b195ff4a3cee50789b88fbcd
- MD5 0d1263d624092cde8c6478f36f6a07a3
- SHA1 154ae93b905ac75e4ab42ff6fc6552df14830da9
- SHA512 5d4bf3bde0a71262fcd4c36750fa44e3e1b0c3303008aee696d4d2c2f2284b57930c2333dfcede31f18e5466e7d93098757e28847dd668aea999a148950fbe78
- SSDEEP 98304:ivccAZPL4N3WlkqL6w9twz+IaZ7AMjwEQ6PCK9W1LKVGiBGCSMaEOmjpyKAsZPws:ivtAZj41WJ6pzqZjwT6p9XVO8wBGP
- TLSH T157863301A7C3487DDD65083A5C239C94AD56BBAA73C1781A3EF9CB8F09FBAC32535590
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.