General
- Target FleetInstaller (3).exe
- Size 39.1MB
- Sample260906-x1bblach44
- SHA256 af9c8d560abbe35f005c465394f76821b830ecb9d9acb87845eecc49967bf2cc
- MD5 6666005a7aeeedb4328893b2be147166
- SHA1 76f1126746819a560b6c806eee20b498f94bee30
- SHA512 e0b2452d4690031a334cc261f0b1bad3907f81e934b6f522821475b41ecb9f933c5f8e586775343851f1e0a1152fc1f5ab29d451030e2f2c0770a75ad3834261
- SSDEEP 786432:OY6Sa0xNQyGDiFktq5hYGJg+mhzmxyw7E8sOzDMElm/GF8en094VLaE58T2qJ:X610uuHzJgBh6xyw7EIDYuFvn0mVOE5s
- TLSH T166973366683B654BC50E6BF6118DCE60D97BF853C35209FB0984C3659FE9DC82F2CA60
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
FleetInstaller (3).exe
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
FleetInstaller (3).exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target FleetInstaller (3).exe
- Size 39.1MB
- SHA256 af9c8d560abbe35f005c465394f76821b830ecb9d9acb87845eecc49967bf2cc
- MD5 6666005a7aeeedb4328893b2be147166
- SHA1 76f1126746819a560b6c806eee20b498f94bee30
- SHA512 e0b2452d4690031a334cc261f0b1bad3907f81e934b6f522821475b41ecb9f933c5f8e586775343851f1e0a1152fc1f5ab29d451030e2f2c0770a75ad3834261
- SSDEEP 786432:OY6Sa0xNQyGDiFktq5hYGJg+mhzmxyw7E8sOzDMElm/GF8en094VLaE58T2qJ:X610uuHzJgBh6xyw7EIDYuFvn0mVOE5s
- TLSH T166973366683B654BC50E6BF6118DCE60D97BF853C35209FB0984C3659FE9DC82F2CA60
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks whether UAC is enabled