General
- Target CreamInstaller.exe
- Size 159.3MB
- Sample260908-qext5szyfx
- SHA256 9ba98a3e279100d081b826f0cd7ee5df75544cab38256ba83b92847c533b869e
- MD5 09d5589a1d6bb5d054231257c6c74168
- SHA1 ac00b9453fc2c1c445beff7ffa464d0e216805b1
- SHA512 f0bc1b69df56803c4bfaaea58b6192fe9d2a94277aac9cbc75126351926243dcb7534e1edbe50a2f239a4893c5b14bfafde7ece78fe12f0beea7c29d15041664
- SSDEEP 3145728:adzBbVtQAWUPwQjg+B6ZXCAvzNHEdNebeFQl3cZlnh0fy7oUyGgx1VQpO:aTbcAWU2661nNRSQcCySGgx7Qs
- TLSH T1CD883356E2B800E8E57BC1B8C65B5517E7B1341A073097EB66A886692F37FE09F3D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
CreamInstaller.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
CreamInstaller.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target CreamInstaller.exe
- Size 159.3MB
- SHA256 9ba98a3e279100d081b826f0cd7ee5df75544cab38256ba83b92847c533b869e
- MD5 09d5589a1d6bb5d054231257c6c74168
- SHA1 ac00b9453fc2c1c445beff7ffa464d0e216805b1
- SHA512 f0bc1b69df56803c4bfaaea58b6192fe9d2a94277aac9cbc75126351926243dcb7534e1edbe50a2f239a4893c5b14bfafde7ece78fe12f0beea7c29d15041664
- SSDEEP 3145728:adzBbVtQAWUPwQjg+B6ZXCAvzNHEdNebeFQl3cZlnh0fy7oUyGgx1VQpO:aTbcAWU2661nNRSQcCySGgx7Qs
- TLSH T1CD883356E2B800E8E57BC1B8C65B5517E7B1341A073097EB66A886692F37FE09F3D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL