General
- Target ISOMate.exe
- Size 2.2MB
- Sample261101-1hmhpadt6y
- SHA256 7e0dd0d17d4615e01bbdcb1a5c91a5aa9b812c721c6a799a6f6ede0d78b5bfc7
- MD5 71c4553089f365efa8a843789ad41710
- SHA1 ac4b596a891eddfbe7c10854741b5d6b1d3cadec
- SHA512 423b1d88dadac592faac12d6c53a3c4622591d25a1594ccd8bd22d281ffe6c686e69054f6790145411f81e5cf69b8559541906442cbe635917b666f71551d1a3
- SSDEEP 49152:gUlRNsnRU/tEyZ0aEoV5F7ZdOciMXAv/2SNsnRU/tEyZ0aEnNsnRU/tEyZ0aEr:gQNsnRU/tEyZ0aEopV0UAmSNsnRU/tE8
- TLSH T11EA5D059D1454ABCC99E70F855368882DDB6EC9F0395D2AA36CFE7E9C70C9808933B13
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ISOMate.exe
Resource
win10v2004-20260911-en
17 signatures
900 seconds
Behavioral task
behavioral2
Sample
ISOMate.exe
Resource
win11ltsc2024-20260911-en
17 signatures
900 seconds
Malware Config
Targets
-
- Target ISOMate.exe
- Size 2.2MB
- SHA256 7e0dd0d17d4615e01bbdcb1a5c91a5aa9b812c721c6a799a6f6ede0d78b5bfc7
- MD5 71c4553089f365efa8a843789ad41710
- SHA1 ac4b596a891eddfbe7c10854741b5d6b1d3cadec
- SHA512 423b1d88dadac592faac12d6c53a3c4622591d25a1594ccd8bd22d281ffe6c686e69054f6790145411f81e5cf69b8559541906442cbe635917b666f71551d1a3
- SSDEEP 49152:gUlRNsnRU/tEyZ0aEoV5F7ZdOciMXAv/2SNsnRU/tEyZ0aEnNsnRU/tEyZ0aEr:gQNsnRU/tEyZ0aEopV0UAmSNsnRU/tE8
- TLSH T11EA5D059D1454ABCC99E70F855368882DDB6EC9F0395D2AA36CFE7E9C70C9808933B13
- MD5 SHA1 SHA512 SSDEEP TLSH
Downloads MZ/PE file
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Ignore Process Interrupts
1Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1