General
- Target 15edbe94afa239223fc91b7e606a090bdbc203ae9ff14ab2742e216c3beba5c4
- Size 2.7MB
- Sample260930-lm78maxame
- SHA256 15edbe94afa239223fc91b7e606a090bdbc203ae9ff14ab2742e216c3beba5c4
- MD5 d9d11b46e604e1de38d348ebe65a27ed
- SHA1 1a07fab7c01a8849f5384e7861fbdcad3000e033
- SHA512 adbc578c83f3c21a4e6aac2d46c51a5884761e7bde5a59f799809b6d4fef200c7892e3cd8b380757a3f92c3410f14992bfa58cb5968885fd6e3071f7460a5e05
- SSDEEP 49152:smPvgSSMsMM67ZqseaYAoxIueYOe6ZI8+hHYsgnEkQsAy5ljDAHR90p3:V3lPbEPanieYdzh43nb5pAHR90p3
- TLSH T174D533A74070FC32E69BD63361FE37C8668C6E62E2D1EA5311713F85945CAB68B215CC
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Emulator.READ.NFO-R2R/Setup DVREMU2 Manager v1.0.0.exe
Resource
win10v2004-20260911-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target Emulator.READ.NFO-R2R/Setup DVREMU2 Manager v1.0.0.exe
- Size 7.9MB
- SHA256 8d31d34083335dc0cc3c76bd5f418846e8f4daad5a437cefd8e47df332401b08
- MD5 712694288f0a36efead1b9ba8b4c0ab0
- SHA1 543a71e15c14cb6a080f16aea554ec2f5257d6c7
- SHA512 aa73c45724196a4e7b171c403c69b7c84fbe2550e245a6bc8c0c24d4b9f474e5d0d6aef0cbe7aa7d916630c2245161066516055c9567959f01baed093f4c7b65
- SSDEEP 196608:3DU5o1HnwNOLpZtC78tC1CPwDvt3uFGCC0+pVMo:3DUm1HnwNOLpZtC78w1CPwDvt3uFRC06
- TLSH T136867D6962AC02D5E06A95F8CBD742BE82317F458BB043CF1893B9B81E33BC5167E751
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.