General
- Target RecallSetup.exe
- Size 13.5MB
- Sample261113-3vsxcats6l
- SHA256 1e6a4bdbc6a3c797787873c392c1c60128ed045e38561342da99d0b8d3d2acc0
- MD5 adf943cf623852c1b32347d08b58fec4
- SHA1 608e7c020f3042e744ab0756c00820c78c335112
- SHA512 28928d0c8a2a13d4099ab33fa30148ff7a2291d35db8b1e5f5f2e8fbfc9641546d592a9be1076107c2dc0064c87e4f69968bd87d901f1d41dd31bddde0fec423
- SSDEEP 393216:7RERrxVqjerxVT9VeEKUti9pUqovbQ0otd:7KDRBVmze3otd
- TLSH T1F4E6335137E48B21E2BF6F3A9DB1E2A01B31FC62FD36E70E618115DD4C667848860B67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
RecallSetup.exe
Resource
win10v2004-20260911-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
RecallSetup.exe
Resource
win11ltsc2024-20260911-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target RecallSetup.exe
- Size 13.5MB
- SHA256 1e6a4bdbc6a3c797787873c392c1c60128ed045e38561342da99d0b8d3d2acc0
- MD5 adf943cf623852c1b32347d08b58fec4
- SHA1 608e7c020f3042e744ab0756c00820c78c335112
- SHA512 28928d0c8a2a13d4099ab33fa30148ff7a2291d35db8b1e5f5f2e8fbfc9641546d592a9be1076107c2dc0064c87e4f69968bd87d901f1d41dd31bddde0fec423
- SSDEEP 393216:7RERrxVqjerxVT9VeEKUti9pUqovbQ0otd:7KDRBVmze3otd
- TLSH T1F4E6335137E48B21E2BF6F3A9DB1E2A01B31FC62FD36E70E618115DD4C667848860B67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Downloads MZ/PE file
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.