General
- Target Unishade-Setup-0.6.2.exe
- Size 3.3MB
- Sample261107-1e49bsfv81
- SHA256 deb86fa83c092e6e4a963c43cb36109e8622b46b0a32c7009e7abf1d194ba632
- MD5 1ca1426dbd6af5900322db3f272d94ac
- SHA1 59da7507f24082ff9b53b985b8233cecea1ec3d5
- SHA512 e14d7d1f04f52d6fbb7e3b76bc6f9886e120eb775d3234996385a3f13e17f9ab4402be5b4dbffa06cdaef98360893618f7b329c2e6380d021291403e7e9af0d6
- SSDEEP 49152:+dGeNQ5epuwk1+knmjJK6qhuaQhV2nvRTLgb1IcSFH1nJKjJHpJwewm3znIC:ppQEkyuezJJsZ
- TLSH T1EDF5BE1AA2E401FCE0BBC179CE969907EB72780A07709ADF07E056951F637E05F7A712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Unishade-Setup-0.6.2.exe
Resource
win10v2004-20260911-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
Unishade-Setup-0.6.2.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target Unishade-Setup-0.6.2.exe
- Size 3.3MB
- SHA256 deb86fa83c092e6e4a963c43cb36109e8622b46b0a32c7009e7abf1d194ba632
- MD5 1ca1426dbd6af5900322db3f272d94ac
- SHA1 59da7507f24082ff9b53b985b8233cecea1ec3d5
- SHA512 e14d7d1f04f52d6fbb7e3b76bc6f9886e120eb775d3234996385a3f13e17f9ab4402be5b4dbffa06cdaef98360893618f7b329c2e6380d021291403e7e9af0d6
- SSDEEP 49152:+dGeNQ5epuwk1+knmjJK6qhuaQhV2nvRTLgb1IcSFH1nJKjJHpJwewm3znIC:ppQEkyuezJJsZ
- TLSH T1EDF5BE1AA2E401FCE0BBC179CE969907EB72780A07709ADF07E056951F637E05F7A712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Downloads MZ/PE file
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.