General
- Target Unishade-Setup-0.6.2.exe
- Size 3.3MB
- Sample261011-wtlnbabx71
- SHA256 deb86fa83c092e6e4a963c43cb36109e8622b46b0a32c7009e7abf1d194ba632
- MD5 1ca1426dbd6af5900322db3f272d94ac
- SHA1 59da7507f24082ff9b53b985b8233cecea1ec3d5
- SHA512 e14d7d1f04f52d6fbb7e3b76bc6f9886e120eb775d3234996385a3f13e17f9ab4402be5b4dbffa06cdaef98360893618f7b329c2e6380d021291403e7e9af0d6
- SSDEEP 49152:+dGeNQ5epuwk1+knmjJK6qhuaQhV2nvRTLgb1IcSFH1nJKjJHpJwewm3znIC:ppQEkyuezJJsZ
- TLSH T1EDF5BE1AA2E401FCE0BBC179CE969907EB72780A07709ADF07E056951F637E05F7A712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Unishade-Setup-0.6.2.exe
Resource
win10v2004-20260911-en
21 signatures
150 seconds
Behavioral task
behavioral2
Sample
Unishade-Setup-0.6.2.exe
Resource
win11ltsc2024-20260911-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target Unishade-Setup-0.6.2.exe
- Size 3.3MB
- SHA256 deb86fa83c092e6e4a963c43cb36109e8622b46b0a32c7009e7abf1d194ba632
- MD5 1ca1426dbd6af5900322db3f272d94ac
- SHA1 59da7507f24082ff9b53b985b8233cecea1ec3d5
- SHA512 e14d7d1f04f52d6fbb7e3b76bc6f9886e120eb775d3234996385a3f13e17f9ab4402be5b4dbffa06cdaef98360893618f7b329c2e6380d021291403e7e9af0d6
- SSDEEP 49152:+dGeNQ5epuwk1+knmjJK6qhuaQhV2nvRTLgb1IcSFH1nJKjJHpJwewm3znIC:ppQEkyuezJJsZ
- TLSH T1EDF5BE1AA2E401FCE0BBC179CE969907EB72780A07709ADF07E056951F637E05F7A712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.