General
- Target setup.exe
- Size 5.8MB
- Sample260907-m28ndagd79
- SHA256 6e363dd107df9d939600478664bd777d64ca9a2140ca5c058396bf9ae4ec0959
- MD5 1d5d5299d035dea35d4fdb0dd409e467
- SHA1 86001abc305afbc38bdd7aad06c29e063d74e25a
- SHA512 f1279f214a5ee2d50099d8ac6e82d75d18dd5fac38fb9f6be10a720d86e422a9d832354af51c858b537ddaaeb7b2f066c3bc7104da7ade081a9209c7ba102d92
- SSDEEP 98304:Lf7wCQInrje/CAVMJy1WJcfKmKujP4rPiyVMLqF43zLITS6jWdBrwoYN:Lfn6/VSlsK+EiyVLF4jLI2aKBC
- TLSH T123563301F3D31836F06409354D1692796E12FBB76AD564265EFCCB0F0AB828379FB6A4
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
setup.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target setup.exe
- Size 5.8MB
- SHA256 6e363dd107df9d939600478664bd777d64ca9a2140ca5c058396bf9ae4ec0959
- MD5 1d5d5299d035dea35d4fdb0dd409e467
- SHA1 86001abc305afbc38bdd7aad06c29e063d74e25a
- SHA512 f1279f214a5ee2d50099d8ac6e82d75d18dd5fac38fb9f6be10a720d86e422a9d832354af51c858b537ddaaeb7b2f066c3bc7104da7ade081a9209c7ba102d92
- SSDEEP 98304:Lf7wCQInrje/CAVMJy1WJcfKmKujP4rPiyVMLqF43zLITS6jWdBrwoYN:Lfn6/VSlsK+EiyVLF4jLI2aKBC
- TLSH T123563301F3D31836F06409354D1692796E12FBB76AD564265EFCCB0F0AB828379FB6A4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.