General
- Target Claude%20Setup.exe
- Size 6.8MB
- Sample260903-wzy6lay1ev
- SHA256 2a8d39c608b6cca03ac053688ce38da4265d1766473ae25ac367c60840c7470d
- MD5 f005ca2b34ebe075e208637cfbcf962c
- SHA1 18c1042a77bb0abeda731879fba0629fba00037a
- SHA512 16f28c43aa9b4db632c27b4e0cd9a5e1541636a91ffb411e58c6507fb1c58ead45a8bd4f8b93c31a80e3c8791e696ce0c14f8bf6068c3321ce76197739b618ca
- SSDEEP 49152:y64pYde+u1bCkBpkfFwjkdlp5ebiPTDDKUU80+6hwk8uPA5D0UjjnVtAv8nfKiKh:yZCLXaibDDfY+6a/K6bfUEp4
- TLSH T1AE663907ECA145E5C0A9E23489679253BB727C885B3123D72F90F7282F76BE06DB9750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
Claude%20Setup.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
Claude%20Setup.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target Claude%20Setup.exe
- Size 6.8MB
- SHA256 2a8d39c608b6cca03ac053688ce38da4265d1766473ae25ac367c60840c7470d
- MD5 f005ca2b34ebe075e208637cfbcf962c
- SHA1 18c1042a77bb0abeda731879fba0629fba00037a
- SHA512 16f28c43aa9b4db632c27b4e0cd9a5e1541636a91ffb411e58c6507fb1c58ead45a8bd4f8b93c31a80e3c8791e696ce0c14f8bf6068c3321ce76197739b618ca
- SSDEEP 49152:y64pYde+u1bCkBpkfFwjkdlp5ebiPTDDKUU80+6hwk8uPA5D0UjjnVtAv8nfKiKh:yZCLXaibDDfY+6a/K6bfUEp4
- TLSH T1AE663907ECA145E5C0A9E23489679253BB727C885B3123D72F90F7282F76BE06DB9750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops file in System32 directory