General
- Target SplashtopSOS_Win_v3.8.6.1_RZZAWPJYALYXEU.exe
- Size 20.1MB
- Sample260929-vpcdeayfpg
- SHA256 7670f7bc893c63807642b7cb56df36441055cb0e65b6408aa69a858a0f19149e
- MD5 eb5308dbc6ad8524fa63f7682cb0792c
- SHA1 28fe13dcce7dc4ced6f543803a02cb8a50c6273e
- SHA512 0f34faf3b6e4b722dca0954d3cd7d3b804bd7c935292784e3969cba6541f3a68654914f90510489a84b6a876f2322129634e50487c84aaee562d71e705cdc860
- SSDEEP 393216:9BA6V6y07YgW3UHQzaXSVqkQJY7PTiDvXnaQhqfkQIITC65MAAya5biUTt:L1r023UvzkUYaDvXhqfrRu6eBPT
- TLSH T13C273375F1483CE5E2A64036B965B92A0364B7538ECE50C993B8B64506B27E2FF23D0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
SplashtopSOS_Win_v3.8.6.1_RZZAWPJYALYXEU.exe
Resource
win10v2004-20260911-en
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
SplashtopSOS_Win_v3.8.6.1_RZZAWPJYALYXEU.exe
Resource
win11ltsc2024-20260911-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target SplashtopSOS_Win_v3.8.6.1_RZZAWPJYALYXEU.exe
- Size 20.1MB
- SHA256 7670f7bc893c63807642b7cb56df36441055cb0e65b6408aa69a858a0f19149e
- MD5 eb5308dbc6ad8524fa63f7682cb0792c
- SHA1 28fe13dcce7dc4ced6f543803a02cb8a50c6273e
- SHA512 0f34faf3b6e4b722dca0954d3cd7d3b804bd7c935292784e3969cba6541f3a68654914f90510489a84b6a876f2322129634e50487c84aaee562d71e705cdc860
- SSDEEP 393216:9BA6V6y07YgW3UHQzaXSVqkQJY7PTiDvXnaQhqfkQIITC65MAAya5biUTt:L1r023UvzkUYaDvXhqfrRu6eBPT
- TLSH T13C273375F1483CE5E2A64036B965B92A0364B7538ECE50C993B8B64506B27E2FF23D0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1