Overview
overview
3Static
static
1api-ms-win...-0.dll
windows10-2004-x64
1api-ms-win...-0.dll
windows10-2004-x64
1api-ms-win...-0.dll
windows10-2004-x64
1mib.bin
windows7-x64
3mib.bin
windows10-2004-x64
3setup.exe
windows7-x64
1setup.exe
windows10-2004-x64
1setupact.log
windows7-x64
1setupact.log
windows10-2004-x64
1system.ini
windows7-x64
1system.ini
windows10-2004-x64
1Analysis
-
max time kernel
10s -
max time network
16s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
26-07-2024 13:45
Static task
static1
Behavioral task
behavioral1
Sample
api-ms-win-core-console-l1-1-0.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral2
Sample
api-ms-win-core-datetime-l1-1-0.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
api-ms-win-core-debug-l1-1-0.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral4
Sample
mib.bin
Resource
win7-20240704-en
Behavioral task
behavioral5
Sample
mib.bin
Resource
win10v2004-20240709-en
Behavioral task
behavioral6
Sample
setup.exe
Resource
win7-20240704-en
Behavioral task
behavioral7
Sample
setup.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral8
Sample
setupact.log
Resource
win7-20240704-en
Behavioral task
behavioral9
Sample
setupact.log
Resource
win10v2004-20240709-en
Behavioral task
behavioral10
Sample
system.ini
Resource
win7-20240704-en
Behavioral task
behavioral11
Sample
system.ini
Resource
win10v2004-20240709-en
General
-
Target
setup.exe
-
Size
52.5MB
-
MD5
4efe5b34754a7b87e7a2fb46664fb245
-
SHA1
7a2ffeac89d92fb0fb987cb6b284133e41a1e666
-
SHA256
88f6b132a2f2f4bee053e521ca9a212bca12ed681b223ad615d4263c976e152c
-
SHA512
a090deac29ae7aa7baf6411d1eef6121f5fdf09eb3d14f57f2b7e1f1f56859a70d12019234055c74df6e339081529c670bdf035c728244435ea8830b2d6f6b14
-
SSDEEP
393216:3T6KLdGUHM9yCKxECB54r6X9eDQrps7p6Y:3T6edGUs9yLEFy+sY
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 1036 setup.exe