General
- Target Capri-Setup.exe
- Size 20.2MB
- Sample261107-t5em2ads9v
- SHA256 2d70dc78ecd25fa105c908e653dce02158de1c6da698badd9290618d9e585954
- MD5 0e780945c0a23a062ca52ceeb98fe855
- SHA1 6355534279f2846d59ab810410ae58e29c4e4273
- SHA512 d730b105044364bb63ab5aafa4f580d14df594ceb69ab41c0b2a3bb9beb4e8a104c70d4f43daea32f1acb9ad22e5aa118cbee5eba7c07ace7085f26b680825c5
- SSDEEP 393216:qmj27fH4uN0RZN2MUPsd7iWaTP/oRfyWD8g1NJgXi:qfHhN8jUEd7iT/oRfy+nf
- TLSH T1A6279C4063F95A18F2FF7FB168B552508A36BCAAAE7AD38D0A41555D0D72B80CC74B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Capri-Setup.exe
Resource
win10v2004-20260911-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
Capri-Setup.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target Capri-Setup.exe
- Size 20.2MB
- SHA256 2d70dc78ecd25fa105c908e653dce02158de1c6da698badd9290618d9e585954
- MD5 0e780945c0a23a062ca52ceeb98fe855
- SHA1 6355534279f2846d59ab810410ae58e29c4e4273
- SHA512 d730b105044364bb63ab5aafa4f580d14df594ceb69ab41c0b2a3bb9beb4e8a104c70d4f43daea32f1acb9ad22e5aa118cbee5eba7c07ace7085f26b680825c5
- SSDEEP 393216:qmj27fH4uN0RZN2MUPsd7iWaTP/oRfyWD8g1NJgXi:qfHhN8jUEd7iT/oRfy+nf
- TLSH T1A6279C4063F95A18F2FF7FB168B552508A36BCAAAE7AD38D0A41555D0D72B80CC74B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Adds Run key to start application
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.