General
- Target FleetInstaller (12).exe
- Size 39.2MB
- Sample260908-cc4b9azdnc
- SHA256 0a03381630be7ede95448da219094404f8911a3cc62bb03a6af2dd1badc68498
- MD5 d5c19b31cd81840088ccac84d42923ab
- SHA1 02ec6be213a0542639759d8b526324ea5cf10db7
- SHA512 37cb87b8877f07aeb0a290eb282a0f9bedd765383a41f081901f92d1bf23b3e3a4b96c334c2d8a7bb5e120565d69d6898021d4da9089def5cd63c7741a394fdb
- SSDEEP 786432:HmHSQ0uNQgGuhF/tq5JIgJg+mhzmxyw7E8sOzDMElm/GF8en094VLaE58TVy:GH/0lI4JgBh6xyw7EIDYuFvn0mVOE58Y
- TLSH T13B973369647A6647C50E6BF6119DCE21DD7BF85383520DFB0884C3619FE9DC82F2CAA0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
FleetInstaller (12).exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
FleetInstaller (12).exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target FleetInstaller (12).exe
- Size 39.2MB
- SHA256 0a03381630be7ede95448da219094404f8911a3cc62bb03a6af2dd1badc68498
- MD5 d5c19b31cd81840088ccac84d42923ab
- SHA1 02ec6be213a0542639759d8b526324ea5cf10db7
- SHA512 37cb87b8877f07aeb0a290eb282a0f9bedd765383a41f081901f92d1bf23b3e3a4b96c334c2d8a7bb5e120565d69d6898021d4da9089def5cd63c7741a394fdb
- SSDEEP 786432:HmHSQ0uNQgGuhF/tq5JIgJg+mhzmxyw7E8sOzDMElm/GF8en094VLaE58TVy:GH/0lI4JgBh6xyw7EIDYuFvn0mVOE58Y
- TLSH T13B973369647A6647C50E6BF6119DCE21DD7BF85383520DFB0884C3619FE9DC82F2CAA0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks whether UAC is enabled