General
- Target Installer-1.1.2.exe
- Size 9.8MB
- Sample261110-eafvaacf96
- SHA256 9d5b3be1f5525dc84ae008563f0131e6c1af40f9c73febdd4746aec078359bee
- MD5 79fb5ff0f573288eca4ce6ce547857a3
- SHA1 3f1e2a2ab7b0b9a063e7cb54b6813eb37de3a730
- SHA512 84ddcad6f27f06266a0cb63fb5b54406f2723c73565dca9a07e5fcdb80f55c8212c68c53970c4f8fbd6f31916d926f76f88991280a00961e384ad20880c043a2
- SSDEEP 196608:H12eQ75UY6MQ2iUwECSAFQg9uOvRlogm1XGz9bYb7QcWOqErqneAzQb/:V2B6jMQ2iB2AFr4OvRlsdGR2EdErw5ze
- TLSH T10DA6334B30C521AAE987D33A56A00A47672AF4195F7FDB9783194B905F372C0EF74BA0
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Installer-1.1.2.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
Installer-1.1.2.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target Installer-1.1.2.exe
- Size 9.8MB
- SHA256 9d5b3be1f5525dc84ae008563f0131e6c1af40f9c73febdd4746aec078359bee
- MD5 79fb5ff0f573288eca4ce6ce547857a3
- SHA1 3f1e2a2ab7b0b9a063e7cb54b6813eb37de3a730
- SHA512 84ddcad6f27f06266a0cb63fb5b54406f2723c73565dca9a07e5fcdb80f55c8212c68c53970c4f8fbd6f31916d926f76f88991280a00961e384ad20880c043a2
- SSDEEP 196608:H12eQ75UY6MQ2iUwECSAFQg9uOvRlogm1XGz9bYb7QcWOqErqneAzQb/:V2B6jMQ2iB2AFr4OvRlsdGR2EdErw5ze
- TLSH T10DA6334B30C521AAE987D33A56A00A47672AF4195F7FDB9783194B905F372C0EF74BA0
- MD5 SHA1 SHA512 SSDEEP TLSH
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL