General
- Target WIN_STB-5.4.442.0.exe_PROD (2).exe
- Size 93.8MB
- Sample260930-eedkqazzht
- SHA256 b7847398eaea7ac1be2a9c234dfd6ecf07543c76813668a8fac77957605c3cd0
- MD5 55adbe3c1a3d8a802c028999886cdffa
- SHA1 b23a567adb04a8a02382ddf51ae40543fb7e12f9
- SHA512 ea24edb4f1030be9318a38365a2d59aebc4fc59de166aee923a8a51b98626373b91449b113bd895f433e10f8edd488f8b2842733519c14579a02cbcc94e0bb15
- SSDEEP 1572864:pkk8J9sw2fJEYpZ3dD0GJ1AxM//hMH1mlup4xROGj0A3uS6RziqBJL7zNcDapAvR:+19sTJEydD001phDuifgHRzD7aQAv2uW
- TLSH T147283323A661203EE2B205354D6F9D3181563D336AB59146F266FF292EF08D2BC1BF17
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
WIN_STB-5.4.442.0.exe_PROD (2).exe
Resource
win10v2004-20260911-en
25 signatures
900 seconds
Behavioral task
behavioral2
Sample
WIN_STB-5.4.442.0.exe_PROD (2).exe
Resource
win11ltsc2024-20260911-en
16 signatures
900 seconds
Malware Config
Targets
-
- Target WIN_STB-5.4.442.0.exe_PROD (2).exe
- Size 93.8MB
- SHA256 b7847398eaea7ac1be2a9c234dfd6ecf07543c76813668a8fac77957605c3cd0
- MD5 55adbe3c1a3d8a802c028999886cdffa
- SHA1 b23a567adb04a8a02382ddf51ae40543fb7e12f9
- SHA512 ea24edb4f1030be9318a38365a2d59aebc4fc59de166aee923a8a51b98626373b91449b113bd895f433e10f8edd488f8b2842733519c14579a02cbcc94e0bb15
- SSDEEP 1572864:pkk8J9sw2fJEYpZ3dD0GJ1AxM//hMH1mlup4xROGj0A3uS6RziqBJL7zNcDapAvR:+19sTJEydD001phDuifgHRzD7aQAv2uW
- TLSH T147283323A661203EE2B205354D6F9D3181563D336AB59146F266FF292EF08D2BC1BF17
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.