General
- Target nfa-pub-loader-0.5.4-win-x64-setup.exe
- Size 19.0MB
- Sample261027-dk5qqace72
- SHA256 74bb29254d8945afb6fc232321c29cc62c1446e0058f704ceff27eb0c7c80f1b
- MD5 3f9989fef017dd087612d1833f9e2438
- SHA1 8f998a259cbc7fa36d2541c59c9a873d3f840290
- SHA512 bf2c4de11371787d2874a33e13a4e39fdf8c411e321508e72b1fe378c66dc57f857d721ed3a0dcbaa5218e10ee81e6f979c8bafe551ba87e7e003186ddbca095
- SSDEEP 393216:MzdTwv8ECQVDKvIS3gKOCTkvc8eTwLUpYr5H11ah7:sd9EF2gSwUkEZgz511a5
- TLSH T17517333BB28B763EF06A56363A77AA50143B6A5179238C0296F4C88CCF154711E3F797
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
nfa-pub-loader-0.5.4-win-x64-setup.exe
Resource
win10v2004-20260911-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
nfa-pub-loader-0.5.4-win-x64-setup.exe
Resource
win11ltsc2024-20260911-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target nfa-pub-loader-0.5.4-win-x64-setup.exe
- Size 19.0MB
- SHA256 74bb29254d8945afb6fc232321c29cc62c1446e0058f704ceff27eb0c7c80f1b
- MD5 3f9989fef017dd087612d1833f9e2438
- SHA1 8f998a259cbc7fa36d2541c59c9a873d3f840290
- SHA512 bf2c4de11371787d2874a33e13a4e39fdf8c411e321508e72b1fe378c66dc57f857d721ed3a0dcbaa5218e10ee81e6f979c8bafe551ba87e7e003186ddbca095
- SSDEEP 393216:MzdTwv8ECQVDKvIS3gKOCTkvc8eTwLUpYr5H11ah7:sd9EF2gSwUkEZgz511a5
- TLSH T17517333BB28B763EF06A56363A77AA50143B6A5179238C0296F4C88CCF154711E3F797
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.