General
- Target L2AncientsSetup.exe
- Size 2.8MB
- Sample261003-w4mncsvz3k
- SHA256 42cc3afcffb3d21b60ddd95d5de6522a3f3798eb70e7033787257dcdd2226a93
- MD5 b424246e9d67f5266b9b9113f9ca4234
- SHA1 416ff073576f79669e1e24b3df2eeaec9235953f
- SHA512 15c4ed0e624e4ea5bdf7e1fd7620058e451427f325dd7b8f6d3d9fea7c621ace4bf556586024706965a06d5f9552bfc881487097cafa1279771c6e105c134f2f
- SSDEEP 49152:zW1tgMoAnn0dMsm9nkjNXFWWjL5rVmW1tgMoAnn0dMsm9nkjNXFWWjL5IV:igMx8Mf9GNXFHn5rfgMx8Mf9GNXFHn5I
- TLSH T154D523D0B6439553DF2F05B44692AA3C0BF0B8DAB113E7FA98B4465D6ACFF00254D29E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
L2AncientsSetup.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
L2AncientsSetup.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target L2AncientsSetup.exe
- Size 2.8MB
- SHA256 42cc3afcffb3d21b60ddd95d5de6522a3f3798eb70e7033787257dcdd2226a93
- MD5 b424246e9d67f5266b9b9113f9ca4234
- SHA1 416ff073576f79669e1e24b3df2eeaec9235953f
- SHA512 15c4ed0e624e4ea5bdf7e1fd7620058e451427f325dd7b8f6d3d9fea7c621ace4bf556586024706965a06d5f9552bfc881487097cafa1279771c6e105c134f2f
- SSDEEP 49152:zW1tgMoAnn0dMsm9nkjNXFWWjL5rVmW1tgMoAnn0dMsm9nkjNXFWWjL5IV:igMx8Mf9GNXFHn5rfgMx8Mf9GNXFHn5I
- TLSH T154D523D0B6439553DF2F05B44692AA3C0BF0B8DAB113E7FA98B4465D6ACFF00254D29E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE