General
- Target pbirds_setup.exe
- Size 15.3MB
- Sample260910-a1f6hsvxcw
- SHA256 29fe1f9f42113305beda91d6ef3a8f16fbc68b1ddeca5ee6f1b1f40df6c39cfc
- MD5 9b6270e9739c46ffc78b892eb73980d7
- SHA1 b107376381710685a0f1f30b057f7b2ccac9f766
- SHA512 04932ec28cad411109c829e13373248c34ec9f323a4418d17db39a79b64c2e8658ddea64970d1d642e77757822010c2b2429072c5b0f74f7d0a4cabc8acc7a4e
- SSDEEP 393216:MF5s7kvPHun1TjBYPJEkcAamEYVCUoB2MxNl3tJ:qssM1QexPuVCH0MR7
- TLSH T1AFF63343C0494E21F350573BDED2F0D54EEE5DA24A61F41DB484A28EDD0B6E3A2E7B98
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
pbirds_setup.exe
Resource
win10v2004-20260513-en
20 signatures
150 seconds
Malware Config
Targets
-
- Target pbirds_setup.exe
- Size 15.3MB
- SHA256 29fe1f9f42113305beda91d6ef3a8f16fbc68b1ddeca5ee6f1b1f40df6c39cfc
- MD5 9b6270e9739c46ffc78b892eb73980d7
- SHA1 b107376381710685a0f1f30b057f7b2ccac9f766
- SHA512 04932ec28cad411109c829e13373248c34ec9f323a4418d17db39a79b64c2e8658ddea64970d1d642e77757822010c2b2429072c5b0f74f7d0a4cabc8acc7a4e
- SSDEEP 393216:MF5s7kvPHun1TjBYPJEkcAamEYVCUoB2MxNl3tJ:qssM1QexPuVCH0MR7
- TLSH T1AFF63343C0494E21F350573BDED2F0D54EEE5DA24A61F41DB484A28EDD0B6E3A2E7B98
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1