General
- Target setup.exe
- Size 6.2MB
- Sample260831-pc3ryatxcv
- SHA256 4c6fda19a235fa48c3d70333e036ffc6c87fcee6e46968e40e30fcf0ca6ecab6
- MD5 f5e8affef6d9631b951dc127d8fef1b8
- SHA1 3724d0ab3b07bb41ea1e6611f918fec29edbc7e8
- SHA512 5caf8f87c8d0c28242d50c6b24de1f9aa5be8e1cccbfe6022e0fcf91a9977c5b08a32ada378b6a14205054d848daf54a801ad784cd17c51ec51a94d88a6f09cc
- SSDEEP 98304:Ff7wCQInrje/CAVMJy1WzsnYUH5sA3aU6Ewr9WEszwJHovg1AaxlIwrN:Ffn6/VSlzAYUHZ3LhCiqHT1Gwh
- TLSH T16F663382F3C3183AE4A24B350D1165BCAC12FA7A28E551171E7CEBDE0B7518779B77A0
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
setup.exe
Resource
win10v2004-20260513-en
22 signatures
150 seconds
Malware Config
Targets
-
- Target setup.exe
- Size 6.2MB
- SHA256 4c6fda19a235fa48c3d70333e036ffc6c87fcee6e46968e40e30fcf0ca6ecab6
- MD5 f5e8affef6d9631b951dc127d8fef1b8
- SHA1 3724d0ab3b07bb41ea1e6611f918fec29edbc7e8
- SHA512 5caf8f87c8d0c28242d50c6b24de1f9aa5be8e1cccbfe6022e0fcf91a9977c5b08a32ada378b6a14205054d848daf54a801ad784cd17c51ec51a94d88a6f09cc
- SSDEEP 98304:Ff7wCQInrje/CAVMJy1WzsnYUH5sA3aU6Ewr9WEszwJHovg1AaxlIwrN:Ffn6/VSlzAYUHZ3LhCiqHT1Gwh
- TLSH T16F663382F3C3183AE4A24B350D1165BCAC12FA7A28E551171E7CEBDE0B7518779B77A0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.