General
- Target FleetInstaller (10).exe
- Size 39.1MB
- Sample260907-t2cdhayxex
- SHA256 54f8207ace81c7624b9b909368c160bb16e447894c6472a81f436a731ee25038
- MD5 f64f1ebc2f67cbda39edda0f7c8a8b95
- SHA1 3310daaaec404f908dae6f0a4984c2ce10c8758e
- SHA512 bedf235088fb84395e15ed953c1d79483fac025b24147758def0a98acab06d61b3ebadc6343845e2caf091e3fe924eecd0e08672d85692be0ce14ce995688245
- SSDEEP 786432:V5NSs08NQ1G3mFytq5vRHmXJg+mhzmxyw7E8sOzDMElm/GF8en094VLaE58T+Q:3Nr002pHmXJgBh6xyw7EIDYuFvn0mVOr
- TLSH T101973369683A554BC50E6BF6518DCE20D97BF843C3520DFB0984C3B55FE99C82F2CAA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
FleetInstaller (10).exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
FleetInstaller (10).exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target FleetInstaller (10).exe
- Size 39.1MB
- SHA256 54f8207ace81c7624b9b909368c160bb16e447894c6472a81f436a731ee25038
- MD5 f64f1ebc2f67cbda39edda0f7c8a8b95
- SHA1 3310daaaec404f908dae6f0a4984c2ce10c8758e
- SHA512 bedf235088fb84395e15ed953c1d79483fac025b24147758def0a98acab06d61b3ebadc6343845e2caf091e3fe924eecd0e08672d85692be0ce14ce995688245
- SSDEEP 786432:V5NSs08NQ1G3mFytq5vRHmXJg+mhzmxyw7E8sOzDMElm/GF8en094VLaE58T+Q:3Nr002pHmXJgBh6xyw7EIDYuFvn0mVOr
- TLSH T101973369683A554BC50E6BF6518DCE20D97BF843C3520DFB0984C3B55FE99C82F2CAA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks whether UAC is enabled