General
- Target a21839699b8852bd9195cd8ea61c7b7bda37190db1d966338b69aedd8378227f
- Size 1.2MB
- Sample261030-cxt93sgx3x
- SHA256 a21839699b8852bd9195cd8ea61c7b7bda37190db1d966338b69aedd8378227f
- MD5 1019d4f70f7f30889f36029f17fde24a
- SHA1 8197865323af681c418ee37d0ad0fefeecf83b21
- SHA512 0385734b3a72ebc8ce9cf5634f1ff4636b4138d5ba9a7149d93301338d44af0013243e9ef7bb66a97616c59e2d41bf81b2f52f2202b56adbfb7ee7a5dda13216
- SSDEEP 24576:toBUB2TPp9TMaxpg0poDVwA1K0MN37nqsI1fWKxraWElHV4n+hGXYnv3:toGeXTPLhomOwrRcfWsGWEDhRv3
- TLSH T1DD5523DAC5C82027C877997E83726E084AF5AF621CE9F79B6E50B4AD1FB33459047027
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
WeMod-Setup.exe
Resource
win10v2004-20260911-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
WeMod-Setup.exe
Resource
win11ltsc2024-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral3
Sample
游戏爱好者官网.url
Resource
win10v2004-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
游戏爱好者官网.url
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target WeMod-Setup.exe
- Size 124KB
- SHA256 f1b27b43195df155bf4b6428355f3bad69c29ed0120a1b5048d134414cd568f1
- MD5 4b4da83d1f4fc5ab181a74533ba1bec6
- SHA1 385e3604412b56aefc575d313fd31de2c0249982
- SHA512 9a2644ec59c53329ef16987ede27398c42f4f7d43f36a442ee15fa7a3b1ab4cd8f0a7c6f17207c3003791743e2d9f9036eceaef1ee3544f59d2225af7cbfc7a9
- SSDEEP 3072:IGO+5DW54ILlCI+4COHPZEoRT8R4ILlCI+4zOHbCxj:IGPc+f3nB
- TLSH T1A3C38CDAE5DC2522D4AB4DBEA2762E080AF15E551CEAF7DB8D80706C2F737615407233
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
- Target 游戏爱好者官网.url
- Size 57B
- SHA256 f20e0a14b45eb278c635bca29eade657c1da15a975182094977e0c9934a943b4
- MD5 6ce0dc855a4acf0b1633de67647c926b
- SHA1 a6467f1cbd88a6a40cab35f722d4944702be1bff
- SHA512 3fb24f2dff6c111ef7baf6a84b423c61bb00b3ef0602f4e681975c77d3dc9671617d28d7807a2791dd1d55cd69f017b779f83268f7fb5b84a789137dbc7b4bbb
- TLSH T1DA9002B3460DC4A98D22445C9060E63C981360A4985AC8D4E141CF251C4A1925694214
- MD5 SHA1 SHA512 TLSH
Score1/10