General
- Target badlion-client-4.5.8-installer.exe
- Size 2.0MB
- Sample261104-w28g2sed39
- SHA256 0dc2b4666fa1e6d0355ac3ef693da2fe64b233fb4a792dcd7bcfc1a24b9c1231
- MD5 24a445b4ef7bdeb74dd9835ca11a9951
- SHA1 ab1fb951032eaf60fd5b062b3a80a1a68ea4bd24
- SHA512 e7c42d74605c57c8eab238052f30d773c24bdff1784f0d6fe3dbdd73a013ed2d6cdeb0cd07810fd54a85e935306345828921cd9f1f666533f96b413837410d99
- SSDEEP 24576:8XNrSLScusMmOvjjhzvLj51x6jMgkcXjPeynRkIegf+Sve+9Cx+gBbfWzOUxSXcn:DuI2hzxRHcTeynRkfg7ve+AhrWzOUh
- TLSH T172A5D03FB28B653EE06E5A397A72E210583B7A6165138C5696F4C88CCF254701E3F787
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
badlion-client-4.5.8-installer.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target badlion-client-4.5.8-installer.exe
- Size 2.0MB
- SHA256 0dc2b4666fa1e6d0355ac3ef693da2fe64b233fb4a792dcd7bcfc1a24b9c1231
- MD5 24a445b4ef7bdeb74dd9835ca11a9951
- SHA1 ab1fb951032eaf60fd5b062b3a80a1a68ea4bd24
- SHA512 e7c42d74605c57c8eab238052f30d773c24bdff1784f0d6fe3dbdd73a013ed2d6cdeb0cd07810fd54a85e935306345828921cd9f1f666533f96b413837410d99
- SSDEEP 24576:8XNrSLScusMmOvjjhzvLj51x6jMgkcXjPeynRkIegf+Sve+9Cx+gBbfWzOUxSXcn:DuI2hzxRHcTeynRkfg7ve+AhrWzOUh
- TLSH T172A5D03FB28B653EE06E5A397A72E210583B7A6165138C5696F4C88CCF254701E3F787
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Checks for any installed AV software in registry
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.