General
- Target setup.exe
- Size 5.0MB
- Sample260828-pe9y2ahn2z
- SHA256 9ea6f98a84c1a9a6f56be83259a9d4d585de87d0d35573bb85ed4dbd48eef82e
- MD5 6c4304c3cb1a67e173070150cd6b8819
- SHA1 cdab5dc2749cf0d228c46fa02500d4e1af5482ec
- SHA512 fcc44ef4e425d07866fa8e9874a1d52968544498dfca24cc3bd2fa3ee704478c28b5fca5f34abf0fd2f3385540de09c999542fd24fea900246bd3801e0426856
- SSDEEP 98304:df7wCQInrje/CAVMJENoLcftcQzaNmYj3ifkJ4U5PN:dfn6/VSWVKNmYWfq4Uz
- TLSH T1D9363305E3D30836E42414796D1394B87C12BBE616D560626FB8DFCF0A792D73ABBA70
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
setup.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target setup.exe
- Size 5.0MB
- SHA256 9ea6f98a84c1a9a6f56be83259a9d4d585de87d0d35573bb85ed4dbd48eef82e
- MD5 6c4304c3cb1a67e173070150cd6b8819
- SHA1 cdab5dc2749cf0d228c46fa02500d4e1af5482ec
- SHA512 fcc44ef4e425d07866fa8e9874a1d52968544498dfca24cc3bd2fa3ee704478c28b5fca5f34abf0fd2f3385540de09c999542fd24fea900246bd3801e0426856
- SSDEEP 98304:df7wCQInrje/CAVMJENoLcftcQzaNmYj3ifkJ4U5PN:dfn6/VSWVKNmYWfq4Uz
- TLSH T1D9363305E3D30836E42414796D1394B87C12BBE616D560626FB8DFCF0A792D73ABBA70
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.