General
- Target EVKey-setup.rar
- Size 1.1MB
- Sample261030-afwepsvs2r
- SHA256 85bae3ee2edf03af4ca8072589335e684c60d55fd35922ae34cdb6348dadd1cf
- MD5 05a886153b5c86e8ee2c8b1eead616f0
- SHA1 93528d6bf0ba7ae8c0d11df58dd988373692ec54
- SHA512 4e53c4c40b0e19c59cef06dbc16c4df567a1b3e449a86c4ceb5c192474a7c1ab8cc81c32bf617408be1f9d1ddf4f767a623bf57dc710c42d192d57496427e161
- SSDEEP 24576:9m37I9oYlL//l2cGJ4NPl/UkoqD67xjnjBt17qF63f6RP6Tlh:U7I9//sm/voI67hjBtNqF63c6Rh
- TLSH T10B4533809451D3D52F8AEEFCD3FADBE22546C0BE42EB543D5859298225A217F53CDC0B
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
EV.Key-setup.exe
Resource
win10v2004-20260911-en
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
EV.Key-setup.exe
Resource
win11ltsc2024-20260911-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target EV.Key-setup.exe
- Size 1.2MB
- SHA256 7c50bbc21ffb2e4781deab225b07d3579afe7abd7a18f23cae51b4843c96574e
- MD5 c98f5ac194126b2054247c56bf064343
- SHA1 b1baffb8c69fd77564de8f06903757dd5dada468
- SHA512 079c6debdd9c99d1e1b80fd00f04720fa11e655998bdcfc8054d9b3371ffd8c77012bbb2381938611e2a502ea2694660f000cd63470abbcb3aa7befde2d92f04
- SSDEEP 24576:mBWYw2EMTkFZ8+BQGHBwwlebRy+8rRGKO93uPcu2Vi5L55fRebvfYUU:TgdkF26vHqwQVBHRuLL576XVU
- TLSH T1C4451243B7C30472F8318E7885658020AEAB7EB914F5502A2F7CF60D5F756D29C75BA2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.