General
- Target VisualStudioSetup.exe
- Size 4.2MB
- Sample260916-tblt9adj3s
- SHA256 8af93a0d73a0d0a04d5602337017d0ab87cf390e20e881051cac8f62e93b54e7
- MD5 5c32932b96d6196c751cb5975b18f15f
- SHA1 c088a5c84c8aa05da16608df5b05b89b138b6238
- SHA512 f91fa7e181cf34e176c950748c42d16d790b4b0095b452b77bfd3da39e0d3b903414df50d84378227c108a09697d3445ad9d9e362d15967efb8c4937b9562248
- SSDEEP 98304:uE4hpXV1yIrz/N0tCP5o36VPSeX68zaufamatg0F8jjqvO8VDah:YXjyWXe3QS58znEt96ODM
- TLSH T12626236278C5647FCD6F4631035FE6B6697AA8D07B81889F5F80371D8C3598284BAEC3
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
VisualStudioSetup.exe
Resource
win10v2004-20260911-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
VisualStudioSetup.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target VisualStudioSetup.exe
- Size 4.2MB
- SHA256 8af93a0d73a0d0a04d5602337017d0ab87cf390e20e881051cac8f62e93b54e7
- MD5 5c32932b96d6196c751cb5975b18f15f
- SHA1 c088a5c84c8aa05da16608df5b05b89b138b6238
- SHA512 f91fa7e181cf34e176c950748c42d16d790b4b0095b452b77bfd3da39e0d3b903414df50d84378227c108a09697d3445ad9d9e362d15967efb8c4937b9562248
- SSDEEP 98304:uE4hpXV1yIrz/N0tCP5o36VPSeX68zaufamatg0F8jjqvO8VDah:YXjyWXe3QS58znEt96ODM
- TLSH T12626236278C5647FCD6F4631035FE6B6697AA8D07B81889F5F80371D8C3598284BAEC3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.