General
- Target FleetInstaller (11).exe
- Size 39.2MB
- Sample260908-cbrl3ace69
- SHA256 b88e0c358e24aad02fe95842f0a7bac30c2f01995679832083133f4aaf1f45dd
- MD5 8b7e66097ece045a8d97694619879100
- SHA1 3c741ccb5e7d2d7a64612e2b0449275c78448dab
- SHA512 e83261c15b80c8fc6ec2b79af33eebf2452ea14173d8e289fcd73ab06ced92c27479750e1e559ac7e4ec5b614957d08a66d223cb90fc7ecf535088551f85fa8c
- SSDEEP 786432:0qaSC0JNQ6G7SFjtq5BuZwczOWpJg+mhzmxyw7E8sOzDMElm/GF8en094VLaE58N:Lal0W+kIwaJgBh6xyw7EIDYuFvn0mVOH
- TLSH T11397336A647B654BC50E67F6128DCE61DD7BF813C34209FB0884C3A19FE59C92F2CA61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
FleetInstaller (11).exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
FleetInstaller (11).exe
Resource
win11ltsc2024-20260710-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target FleetInstaller (11).exe
- Size 39.2MB
- SHA256 b88e0c358e24aad02fe95842f0a7bac30c2f01995679832083133f4aaf1f45dd
- MD5 8b7e66097ece045a8d97694619879100
- SHA1 3c741ccb5e7d2d7a64612e2b0449275c78448dab
- SHA512 e83261c15b80c8fc6ec2b79af33eebf2452ea14173d8e289fcd73ab06ced92c27479750e1e559ac7e4ec5b614957d08a66d223cb90fc7ecf535088551f85fa8c
- SSDEEP 786432:0qaSC0JNQ6G7SFjtq5BuZwczOWpJg+mhzmxyw7E8sOzDMElm/GF8en094VLaE58N:Lal0W+kIwaJgBh6xyw7EIDYuFvn0mVOH
- TLSH T11397336A647B654BC50E67F6128DCE61DD7BF813C34209FB0884C3A19FE59C92F2CA61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Checks whether UAC is enabled