General
- Target setup.exe
- Size 5.4MB
- Sample261018-1dl2csts2n
- SHA256 e4728765a28a078c5c089fe5c4e2ac2758455882530a76d1e1dc5c05ec4b44fb
- MD5 9629e19914afd06ccb291788ff1c24e9
- SHA1 1dd8d84e40f950d46680f7bb4d358da7287c5854
- SHA512 e1721fc5ca69115fefe419be414d43b0bc534399a98cf37c33be7aea2883e64640c9c7fe51c3777f922f2f3a35e1e01701497223a4c2ed5cb8e071b1857c84a8
- SSDEEP 98304:bf7wCQInrje/CAVMJy1WGsF3V/gdQer9qlkb5RUCkN:bfn6/VSlGC3V/gdQITDg
- TLSH T11E463301E3C3143AE4601935AD67D5B86D13B7FB2AD060295DBCDB8F0A79183BDB66B0
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
setup.exe
Resource
win10v2004-20260911-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target setup.exe
- Size 5.4MB
- SHA256 e4728765a28a078c5c089fe5c4e2ac2758455882530a76d1e1dc5c05ec4b44fb
- MD5 9629e19914afd06ccb291788ff1c24e9
- SHA1 1dd8d84e40f950d46680f7bb4d358da7287c5854
- SHA512 e1721fc5ca69115fefe419be414d43b0bc534399a98cf37c33be7aea2883e64640c9c7fe51c3777f922f2f3a35e1e01701497223a4c2ed5cb8e071b1857c84a8
- SSDEEP 98304:bf7wCQInrje/CAVMJy1WGsF3V/gdQer9qlkb5RUCkN:bfn6/VSlGC3V/gdQITDg
- TLSH T11E463301E3C3143AE4601935AD67D5B86D13B7FB2AD060295DBCDB8F0A79183BDB66B0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.