General
- Target RevoUninProSetup.exe
- Size 17.4MB
- Sample260909-ww2gjs1th1
- SHA256 2c05cfcee763b863fc843f703d48083c1ec9299da7e18aab45fe9b019d043538
- MD5 83a15b2dadfa5f7467a17fdac2e615c8
- SHA1 b1850ecffcf2921cb3f225dfda1e58e7790b77ea
- SHA512 c4afa6b3302c30656d3be9476b1431aecf68cb5545f7fac6fb3a03931bab2c984bb35c6b84cc8d4ef30e02bf92f2bc65788b95a91475ddb57e080a4698dec100
- SSDEEP 393216:jklJvizW5FxlNbsqgz4GQ4g0bpmO5ZLZwj6+HvEXXriOapHNyRe:jklQzUx/bs5z4GQ4g0b50CriOa9NyRe
- TLSH T1B3073347EBC754F2F31B9E38463E42830E35B5E968F5429B2D3AC64E9EB074641313A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
RevoUninProSetup.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
RevoUninProSetup.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target RevoUninProSetup.exe
- Size 17.4MB
- SHA256 2c05cfcee763b863fc843f703d48083c1ec9299da7e18aab45fe9b019d043538
- MD5 83a15b2dadfa5f7467a17fdac2e615c8
- SHA1 b1850ecffcf2921cb3f225dfda1e58e7790b77ea
- SHA512 c4afa6b3302c30656d3be9476b1431aecf68cb5545f7fac6fb3a03931bab2c984bb35c6b84cc8d4ef30e02bf92f2bc65788b95a91475ddb57e080a4698dec100
- SSDEEP 393216:jklJvizW5FxlNbsqgz4GQ4g0bpmO5ZLZwj6+HvEXXriOapHNyRe:jklQzUx/bs5z4GQ4g0b50CriOa9NyRe
- TLSH T1B3073347EBC754F2F31B9E38463E42830E35B5E968F5429B2D3AC64E9EB074641313A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE