General
- Target projectlibre-1.9.8-installer.exe
- Size 2.0MB
- Sample261006-ry3eeacv2k
- SHA256 72adf886d8765ae24dbbd797a5f201a62ca77cce43b7d202ae6b72b41b19e316
- MD5 8b8f4b3d1dc363e93359f2c14c17a0ad
- SHA1 e06de31e6d28f8593985290a38a1e61639a1c7ff
- SHA512 34d20f6b475ab54ed17fa696a90af3c00b6c604a6c4ca3341b32dfe662e0847913e3f9bc2cdcfcf8c993f552cccd872f5788227b58f9d8f8424c0e8c13606c6f
- SSDEEP 24576:pXNrSLScusMmOvjjhzvLVAOgLgkcXjPeynRkIegf+Sve+9Cx+gBbfWzOUxSXc64a:iuI2hREHcTeynRkfg7ve+AhrWzOUq
- TLSH T11DA5D03FB28B653EE06E5A367A72E210583B7A6165138C5696F4C88CCF254701E3F787
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
projectlibre-1.9.8-installer.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target projectlibre-1.9.8-installer.exe
- Size 2.0MB
- SHA256 72adf886d8765ae24dbbd797a5f201a62ca77cce43b7d202ae6b72b41b19e316
- MD5 8b8f4b3d1dc363e93359f2c14c17a0ad
- SHA1 e06de31e6d28f8593985290a38a1e61639a1c7ff
- SHA512 34d20f6b475ab54ed17fa696a90af3c00b6c604a6c4ca3341b32dfe662e0847913e3f9bc2cdcfcf8c993f552cccd872f5788227b58f9d8f8424c0e8c13606c6f
- SSDEEP 24576:pXNrSLScusMmOvjjhzvLVAOgLgkcXjPeynRkIegf+Sve+9Cx+gBbfWzOUxSXc64a:iuI2hREHcTeynRkfg7ve+AhrWzOUq
- TLSH T11DA5D03FB28B653EE06E5A367A72E210583B7A6165138C5696F4C88CCF254701E3F787
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks for any installed AV software in registry
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.