General
- Target FleetInstaller (11).exe
- Size 39.2MB
- Sample260908-blakvsxwe1
- SHA256 b88e0c358e24aad02fe95842f0a7bac30c2f01995679832083133f4aaf1f45dd
- MD5 8b7e66097ece045a8d97694619879100
- SHA1 3c741ccb5e7d2d7a64612e2b0449275c78448dab
- SHA512 e83261c15b80c8fc6ec2b79af33eebf2452ea14173d8e289fcd73ab06ced92c27479750e1e559ac7e4ec5b614957d08a66d223cb90fc7ecf535088551f85fa8c
- SSDEEP 786432:0qaSC0JNQ6G7SFjtq5BuZwczOWpJg+mhzmxyw7E8sOzDMElm/GF8en094VLaE58N:Lal0W+kIwaJgBh6xyw7EIDYuFvn0mVOH
- TLSH T11397336A647B654BC50E67F6128DCE61DD7BF813C34209FB0884C3A19FE59C92F2CA61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
FleetInstaller (11).exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
FleetInstaller (11).exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target FleetInstaller (11).exe
- Size 39.2MB
- SHA256 b88e0c358e24aad02fe95842f0a7bac30c2f01995679832083133f4aaf1f45dd
- MD5 8b7e66097ece045a8d97694619879100
- SHA1 3c741ccb5e7d2d7a64612e2b0449275c78448dab
- SHA512 e83261c15b80c8fc6ec2b79af33eebf2452ea14173d8e289fcd73ab06ced92c27479750e1e559ac7e4ec5b614957d08a66d223cb90fc7ecf535088551f85fa8c
- SSDEEP 786432:0qaSC0JNQ6G7SFjtq5BuZwczOWpJg+mhzmxyw7E8sOzDMElm/GF8en094VLaE58N:Lal0W+kIwaJgBh6xyw7EIDYuFvn0mVOH
- TLSH T11397336A647B654BC50E67F6128DCE61DD7BF813C34209FB0884C3A19FE59C92F2CA61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks whether UAC is enabled