General
- Target PXPlay_Windows_setup_v3.1.0.exe
- Size 345.8MB
- Sample261018-wfeylssxes
- SHA256 d6975e4a5fca4d6cee3bac23c2f163db17acc12f2cf23f8f29287be4f9a9c696
- MD5 45febcb413b2651aefc261912d5726ce
- SHA1 ef041e90c049f8965e2dd1f78f5086a1defbc720
- SHA512 a1bae477b7b34ee71e1585851d4a1d50fbe418160605eef1b27d45edb9a730245b917b4a71d62494517fd596b2ce25253ca230b6ed33a8cc22e39f3474ef3c28
- SSDEEP 6291456:NhtnuXtxv6OxQxD7p/t1aLW9j+4LZLWf+08FCsOeKtC4:NjuXtZbWt/awi4Li+PFCneKv
- TLSH T1AE09333F6A94AA26FD1D913A85328E68F93379705737C8DB82B01114D7272ED8F78364
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
PXPlay_Windows_setup_v3.1.0.exe
Resource
win10v2004-20260911-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
PXPlay_Windows_setup_v3.1.0.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target PXPlay_Windows_setup_v3.1.0.exe
- Size 345.8MB
- SHA256 d6975e4a5fca4d6cee3bac23c2f163db17acc12f2cf23f8f29287be4f9a9c696
- MD5 45febcb413b2651aefc261912d5726ce
- SHA1 ef041e90c049f8965e2dd1f78f5086a1defbc720
- SHA512 a1bae477b7b34ee71e1585851d4a1d50fbe418160605eef1b27d45edb9a730245b917b4a71d62494517fd596b2ce25253ca230b6ed33a8cc22e39f3474ef3c28
- SSDEEP 6291456:NhtnuXtxv6OxQxD7p/t1aLW9j+4LZLWf+08FCsOeKtC4:NjuXtZbWt/awi4Li+PFCneKv
- TLSH T1AE09333F6A94AA26FD1D913A85328E68F93379705737C8DB82B01114D7272ED8F78364
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.