General
- Target Setup_BullzipPDFPrinter_2025_2_0_2990.exe
- Size 27.6MB
- Sample260831-wph2mazyay
- SHA256 f5c940499fdc8acebdca7cd6fa083de36553237feec6ea66975f285d542c94e4
- MD5 957723a2c1858446bcd148b4ede9ef62
- SHA1 60c13479539c9a09b67b81d58127ee9832fab4ee
- SHA512 e1056e91674970c1bbb6033dbfa7765cf4525dfee011ee5030487f6abb5a2add140df2d0f250921d3f1bb686a7e73d6b17d1d1148993e3e7d994af0fd95dff26
- SSDEEP 393216:zD4fkdjAUP79gBcCk7l0GHO1kStqTEsIvnH3hzygNT5nXbBqa5zq0Y7FChcKyHsM:QfEEcCzGjStLnnRR9FbUvChcKlTgdAeT
- TLSH T1D7573313724E773DF4BE9A3556719A21643FAA60B41A8C97C9F81A8CCE2D0512D3FE07
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Setup_BullzipPDFPrinter_2025_2_0_2990.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target Setup_BullzipPDFPrinter_2025_2_0_2990.exe
- Size 27.6MB
- SHA256 f5c940499fdc8acebdca7cd6fa083de36553237feec6ea66975f285d542c94e4
- MD5 957723a2c1858446bcd148b4ede9ef62
- SHA1 60c13479539c9a09b67b81d58127ee9832fab4ee
- SHA512 e1056e91674970c1bbb6033dbfa7765cf4525dfee011ee5030487f6abb5a2add140df2d0f250921d3f1bb686a7e73d6b17d1d1148993e3e7d994af0fd95dff26
- SSDEEP 393216:zD4fkdjAUP79gBcCk7l0GHO1kStqTEsIvnH3hzygNT5nXbBqa5zq0Y7FChcKyHsM:QfEEcCzGjStLnnRR9FbUvChcKlTgdAeT
- TLSH T1D7573313724E773DF4BE9A3556719A21643FAA60B41A8C97C9F81A8CCE2D0512D3FE07
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE