General
- Target Obsidian Ebook Reader.msi
- Size 140.8MB
- Sample260916-tmfglsdk6s
- SHA256 234dbf00ce74aaeac73a7a087fd3f71cc6bf8c87235d81050ea19ac7dbeed591
- MD5 9fbf38562072d0930e0d37ef31685b53
- SHA1 0af68fbe1def99ea331abf273343cad0288339a8
- SHA512 65b0ba4391ac28998268393195f3a3f349cb78328c3d660813703c8ce12a7fd17ee9de8b2759a05f542847c66ad004c147fd53fcf7ebd2468cac485a76e3265a
- SSDEEP 3145728:K9NLbecIfemZLSfyinbpLU55lpkjS4kBbyVpgx8H5WHXV6SYMs/rUn44i:4n2fe4mRWA6B8pgxQUHF/YM2Uz
- TLSH T13D683333BA4A4E33DB5BF83931328A1F561E7E65073600E303B469671267AD1A7B19D3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Obsidian Ebook Reader.msi
Resource
win10v2004-20260911-en
21 signatures
150 seconds
Behavioral task
behavioral2
Sample
Obsidian Ebook Reader.msi
Resource
win11ltsc2024-20260911-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target Obsidian Ebook Reader.msi
- Size 140.8MB
- SHA256 234dbf00ce74aaeac73a7a087fd3f71cc6bf8c87235d81050ea19ac7dbeed591
- MD5 9fbf38562072d0930e0d37ef31685b53
- SHA1 0af68fbe1def99ea331abf273343cad0288339a8
- SHA512 65b0ba4391ac28998268393195f3a3f349cb78328c3d660813703c8ce12a7fd17ee9de8b2759a05f542847c66ad004c147fd53fcf7ebd2468cac485a76e3265a
- SSDEEP 3145728:K9NLbecIfemZLSfyinbpLU55lpkjS4kBbyVpgx8H5WHXV6SYMs/rUn44i:4n2fe4mRWA6B8pgxQUHF/YM2Uz
- TLSH T13D683333BA4A4E33DB5BF83931328A1F561E7E65073600E303B469671267AD1A7B19D3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.