General
- Target EvoVisLauncher.exe
- Size 74.6MB
- Sample261104-twypjsdh85
- SHA256 8c511930350dc6ae225dae8b11cc717496acaed89c0f96fe922ee1c26c69f61e
- MD5 22cf415811b47b5612cdc6f5d2f814a1
- SHA1 d48cb90bb704542410aadcafef69b06641cad8ad
- SHA512 049fbea82b5a07bd4c747f72177b5160a4bab54fd44f077cf3ca6da7808b4be6ed2b94456b65be75b584fd31f0056c13819003f5c4b6d1f58c7d197de6a9abfb
- SSDEEP 1572864:7LuwhHMGdvTna912YsgA+okDmh8cd3yM0Tk8OOPRJWyMgmeQlcPu:rd+2Ys9+1DmFM48hiNncG
- TLSH T14B082356E2F900E8D57AC0B8C6674627FBB13855133057EB66A48A292F37FE06E7D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
EvoVisLauncher.exe
Resource
win10v2004-20260911-en
12 signatures
600 seconds
Behavioral task
behavioral2
Sample
EvoVisLauncher.exe
Resource
win11ltsc2024-20260911-en
3 signatures
600 seconds
Malware Config
Targets
-
- Target EvoVisLauncher.exe
- Size 74.6MB
- SHA256 8c511930350dc6ae225dae8b11cc717496acaed89c0f96fe922ee1c26c69f61e
- MD5 22cf415811b47b5612cdc6f5d2f814a1
- SHA1 d48cb90bb704542410aadcafef69b06641cad8ad
- SHA512 049fbea82b5a07bd4c747f72177b5160a4bab54fd44f077cf3ca6da7808b4be6ed2b94456b65be75b584fd31f0056c13819003f5c4b6d1f58c7d197de6a9abfb
- SSDEEP 1572864:7LuwhHMGdvTna912YsgA+okDmh8cd3yM0Tk8OOPRJWyMgmeQlcPu:rd+2Ys9+1DmFM48hiNncG
- TLSH T14B082356E2F900E8D57AC0B8C6674627FBB13855133057EB66A48A292F37FE06E7D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Checks whether UAC is enabled
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.