General
- Target QueueSniperSetup.exe
- Size 31.1MB
- Sample260925-ld4h3sda36
- SHA256 b5e52db0fe56afa22ee187336421d982fef94b147baae2619730002d69d33d59
- MD5 d09a2b3e8b217e8a438fe464eb6c60a0
- SHA1 fce6d9cbf1f8c9f874861f98ad9f2abc1ee2fd08
- SHA512 b110df308ca277e055e956b12495d9f41b77b09edd1d1a97d52e34e382e54438eea0adeb528c737cb13dd373fda5aa614f4184c39b1b7e76d6e02b20dbe4e3c8
- SSDEEP 786432:8nkKQ5uXIiSA6tf/MBmaAoq1x/bllu5en8wSvQpRVpBGTvWioo:8kRljN/RaBqTxg5e8wSYbwTvroo
- TLSH T1AF67333FA28B553EF06E2A397AB3D160563B6B11A4424C569AF4C84CCFA50704E3F797
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
QueueSniperSetup.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target QueueSniperSetup.exe
- Size 31.1MB
- SHA256 b5e52db0fe56afa22ee187336421d982fef94b147baae2619730002d69d33d59
- MD5 d09a2b3e8b217e8a438fe464eb6c60a0
- SHA1 fce6d9cbf1f8c9f874861f98ad9f2abc1ee2fd08
- SHA512 b110df308ca277e055e956b12495d9f41b77b09edd1d1a97d52e34e382e54438eea0adeb528c737cb13dd373fda5aa614f4184c39b1b7e76d6e02b20dbe4e3c8
- SSDEEP 786432:8nkKQ5uXIiSA6tf/MBmaAoq1x/bllu5en8wSvQpRVpBGTvWioo:8kRljN/RaBqTxg5e8wSYbwTvroo
- TLSH T1AF67333FA28B553EF06E2A397AB3D160563B6B11A4424C569AF4C84CCFA50704E3F797
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.