General
- Target Wasla_Express_Setup.exe
- Size 19.4MB
- Sample261102-vcsjvsbw3w
- SHA256 262e58220180802b5b2425a8e1d62e1928188c5e15a45bd8437ae41e5c74aaad
- MD5 43630390e182588a937ad4c3afb1a5ea
- SHA1 81b84e686a926d331bd9b33072eedf4bb9f0139f
- SHA512 184763366041b39c623985e4e6df843e6386e8431a2676c05ed0242b5ea74d07f32259a00ac610009d51307dce82dc972e3c1b56a470b09894b161f42274d870
- SSDEEP 393216:Oh7/R9tMe8JKv/dAhVk1iflE4h/UbyLBXXz9JwktG72ovXsUjryS7sCzQ:CE2/H1kbFUeNXBvtGyQjGSot
- TLSH T14B173323F2CB553BF0AE4A3649B2D126A43B7E616412486A8BFC785DCF261C11D3F647
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Wasla_Express_Setup.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target Wasla_Express_Setup.exe
- Size 19.4MB
- SHA256 262e58220180802b5b2425a8e1d62e1928188c5e15a45bd8437ae41e5c74aaad
- MD5 43630390e182588a937ad4c3afb1a5ea
- SHA1 81b84e686a926d331bd9b33072eedf4bb9f0139f
- SHA512 184763366041b39c623985e4e6df843e6386e8431a2676c05ed0242b5ea74d07f32259a00ac610009d51307dce82dc972e3c1b56a470b09894b161f42274d870
- SSDEEP 393216:Oh7/R9tMe8JKv/dAhVk1iflE4h/UbyLBXXz9JwktG72ovXsUjryS7sCzQ:CE2/H1kbFUeNXBvtGyQjGSot
- TLSH T14B173323F2CB553BF0AE4A3649B2D126A43B7E616412486A8BFC785DCF261C11D3F647
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.