General
- Target setupvcs.exe
- Size 701.5MB
- Sample260910-es2vgaxclb
- SHA256 a9085154912a14093bb3fceba203411b2b6bb87c7195858d394f123bb244249e
- MD5 939bd001c8a6724c238ee34634799f36
- SHA1 b5c8ec3af6094471859c12cf220a2eb9e747bcd3
- SHA512 6a7e860b0ed49a68690c387a14b2925abed89da4a3961f3e223857f8565e425115f33f79f4f1a3bc34fb63dc4839707e5603e74c8a23b6af4ba954035cbe4a0e
- SSDEEP 12582912:xDz35Ls0N5/T4+U1IQqpZeo2VcwPaqegDCERQ3KjRT17vwK9b4sIaJ:x35Lsk5k8Q2AX6E63ET5vw0
- TLSH T14579333FD32E67FED5670E7086716194A67B3E04C44D2C1B5B96C8981FBE4890AB236C
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
setupvcs.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target setupvcs.exe
- Size 701.5MB
- SHA256 a9085154912a14093bb3fceba203411b2b6bb87c7195858d394f123bb244249e
- MD5 939bd001c8a6724c238ee34634799f36
- SHA1 b5c8ec3af6094471859c12cf220a2eb9e747bcd3
- SHA512 6a7e860b0ed49a68690c387a14b2925abed89da4a3961f3e223857f8565e425115f33f79f4f1a3bc34fb63dc4839707e5603e74c8a23b6af4ba954035cbe4a0e
- SSDEEP 12582912:xDz35Ls0N5/T4+U1IQqpZeo2VcwPaqegDCERQ3KjRT17vwK9b4sIaJ:x35Lsk5k8Q2AX6E63ET5vw0
- TLSH T14579333FD32E67FED5670E7086716194A67B3E04C44D2C1B5B96C8981FBE4890AB236C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.