General
- Target setup.exe
- Size 7.3MB
- Sample261006-t4eawaff24
- SHA256 cad4d61f945211080d3f40a4990df4e627c5acdcc33bc8e2732d29ac3da2fca9
- MD5 82b74eb46cb05f12e9485743e1d70607
- SHA1 da5df72a43d36ac6b53af9992093441c6b4e5773
- SHA512 d2ac3d7d82ba6e6af24b80448fc93d208bbb85fd5b745929d42bdcd0f084635e9fca5db648b2a832b79e61efa149315d73f3003d45b827a80b9d959974ff359a
- SSDEEP 98304:/vccAZPL4N3WlkqL6w9twz+IaZ7AMjwEQ6PCK9WMQCecw+pKdTajPqAP24xtwg0N:/vtAZj41WJ6pzqZjwT6p9FQxcwqs41+
- TLSH T18A763302A7C3447DE86808787D929C84AD52B7E975C578A63EFCCF8F08BA6CB3475191
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
setup.exe
Resource
win10v2004-20260911-en
24 signatures
900 seconds
Malware Config
Targets
-
- Target setup.exe
- Size 7.3MB
- SHA256 cad4d61f945211080d3f40a4990df4e627c5acdcc33bc8e2732d29ac3da2fca9
- MD5 82b74eb46cb05f12e9485743e1d70607
- SHA1 da5df72a43d36ac6b53af9992093441c6b4e5773
- SHA512 d2ac3d7d82ba6e6af24b80448fc93d208bbb85fd5b745929d42bdcd0f084635e9fca5db648b2a832b79e61efa149315d73f3003d45b827a80b9d959974ff359a
- SSDEEP 98304:/vccAZPL4N3WlkqL6w9twz+IaZ7AMjwEQ6PCK9WMQCecw+pKdTajPqAP24xtwg0N:/vtAZj41WJ6pzqZjwT6p9FQxcwqs41+
- TLSH T18A763302A7C3447DE86808787D929C84AD52B7E975C578A63EFCCF8F08BA6CB3475191
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.