General
- Target Setup.exe
- Size 466.1MB
- Sample260904-2aadts1gpc
- SHA256 565a115f29b39bc664e6813f335cbfbd9ac4485206c108ec96666e84148a3ae0
- MD5 31faaf3f07a07df01ecf1bcae6d0c30e
- SHA1 805a234e93c9f879276479f1046d6b0ec8adaba9
- SHA512 9da1a4e8fac38b4d704192a20d11bd3d4e35a66b7435c0c99e4e5bad0091aa6b1ee1f6e4ce8f927852309e5dd3854c2194cf726013213e2b26948f015471db5e
- SSDEEP 12582912:pQ7rPN+JE1bp2UlN4mIYc2F/pkZ2VFD1h2Pc8xs:pQ7J+JqbpDMmIMF/m4+cR
- TLSH T19A393357A5C8851EE9BB0331EEAF4D51B6603C636722848B7190FB681CF17C27DA3A17
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Setup.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
Setup.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target Setup.exe
- Size 466.1MB
- SHA256 565a115f29b39bc664e6813f335cbfbd9ac4485206c108ec96666e84148a3ae0
- MD5 31faaf3f07a07df01ecf1bcae6d0c30e
- SHA1 805a234e93c9f879276479f1046d6b0ec8adaba9
- SHA512 9da1a4e8fac38b4d704192a20d11bd3d4e35a66b7435c0c99e4e5bad0091aa6b1ee1f6e4ce8f927852309e5dd3854c2194cf726013213e2b26948f015471db5e
- SSDEEP 12582912:pQ7rPN+JE1bp2UlN4mIYc2F/pkZ2VFD1h2Pc8xs:pQ7J+JqbpDMmIMF/m4+cR
- TLSH T19A393357A5C8851EE9BB0331EEAF4D51B6603C636722848B7190FB681CF17C27DA3A17
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.