General
- Target EvoVisLauncher.exe
- Size 74.0MB
- Sample261002-vexxcsswf1
- SHA256 042b28c0b2214d334758a5dec374e54d9ed69fc948cd20c222199eed728fd4c8
- MD5 daa51a30d816094ad5c1bc66d097eb63
- SHA1 4a7108489825579eb86ab2f0ebea93bd052df571
- SHA512 ad29acf9b7b8fcbd90450930778466fc867107a3713873c6da48cdf1e575db7a97ddca7fec0ce443539c43ee5774a6cbe88270f82280935e16f26b7410736624
- SSDEEP 1572864:kL1UUNHNiAhSEv4KmeoGcyIj8IJnYKrb0wD/Bfqakgg+:gVNH7SjKFDOjVdVD/Hk4
- TLSH T1AB082356F3B901D8D5BAD178C6674627FBB27845033097CB61A48A692F33BE16E3E310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
EvoVisLauncher.exe
Resource
win10ltsc2021-20260911-fr
15 signatures
900 seconds
Behavioral task
behavioral2
Sample
EvoVisLauncher.exe
Resource
win11ltsc2024-20260911-fr
6 signatures
900 seconds
Malware Config
Targets
-
- Target EvoVisLauncher.exe
- Size 74.0MB
- SHA256 042b28c0b2214d334758a5dec374e54d9ed69fc948cd20c222199eed728fd4c8
- MD5 daa51a30d816094ad5c1bc66d097eb63
- SHA1 4a7108489825579eb86ab2f0ebea93bd052df571
- SHA512 ad29acf9b7b8fcbd90450930778466fc867107a3713873c6da48cdf1e575db7a97ddca7fec0ce443539c43ee5774a6cbe88270f82280935e16f26b7410736624
- SSDEEP 1572864:kL1UUNHNiAhSEv4KmeoGcyIj8IJnYKrb0wD/Bfqakgg+:gVNH7SjKFDOjVdVD/Hk4
- TLSH T1AB082356F3B901D8D5BAD178C6674627FBB27845033097CB61A48A692F33BE16E3E310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.