General
- Target EvoVisLauncher.exe
- Size 74.6MB
- Sample261029-xpn4basvay
- SHA256 3939baa001b00a7837e29c9b2512ced76a6f490bf24b24edbec15063545329a9
- MD5 ab9c0765ec92dadd15b09e184bb74b11
- SHA1 e9bcef5a579ac6d3457756ada307b00cd1e54e81
- SHA512 37993fc7be3a35c5718bd3c4b9d291b158563cd7ed1cf368a1efc59da7fb7262987ac52190ad54a85895fefdad56d7f4cf88250de85438b116073b4f3e66880a
- SSDEEP 1572864:yLrBwhHMGdvTna912YsgA+okDmh8cd3yM0Tk8OOPRJWyMgmeQlcPR:Rd+2Ys9+1DmFM48hiNnc5
- TLSH T188082356F2F900E8D57AC0B8C6674627EBB13855133057EB66A48A292F33FE16E7D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
EvoVisLauncher.exe
Resource
win10ltsc2021-20260911-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
EvoVisLauncher.exe
Resource
win11-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
EvoVisLauncher.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target EvoVisLauncher.exe
- Size 74.6MB
- SHA256 3939baa001b00a7837e29c9b2512ced76a6f490bf24b24edbec15063545329a9
- MD5 ab9c0765ec92dadd15b09e184bb74b11
- SHA1 e9bcef5a579ac6d3457756ada307b00cd1e54e81
- SHA512 37993fc7be3a35c5718bd3c4b9d291b158563cd7ed1cf368a1efc59da7fb7262987ac52190ad54a85895fefdad56d7f4cf88250de85438b116073b4f3e66880a
- SSDEEP 1572864:yLrBwhHMGdvTna912YsgA+okDmh8cd3yM0Tk8OOPRJWyMgmeQlcPR:Rd+2Ys9+1DmFM48hiNnc5
- TLSH T188082356F2F900E8D57AC0B8C6674627EBB13855133057EB66A48A292F33FE16E7D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Checks whether UAC is enabled
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.