Analysis
- max time kernel
99s - max time network
145s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20250610-en - resource tags
arch:x64arch:x86image:win10ltsc2021-20250610-enlocale:en-usos:windows10-ltsc_2021-x64system - submitted
06/09/2025, 17:07
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Setup.exe
Resource
win10v2004-20250610-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Setup.exe
Resource
win10ltsc2021-20250610-en
windows10-ltsc_2021-x64
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
Setup.exe
Resource
win11-20250619-en
windows11-21h2-x64
3 signatures
150 seconds
General
- Target Setup.exe
- Size 869KB
- Sample250906-vm3gtabp3v
- SHA256 d5e20fc37dd77dd0360fd32446799978048a2c60e036dbfbf5e671333ebd81f1
- MD5 f2b790302bfb0e7f97f36a387eaeb227
- SHA1 6d702fe228a47e01198fee387a2baecacac706f8
- SHA512 d5e0165389204307ef19cef306c533ea331f24e9d78f5a59b54757cc2707447a1d38ce5f359b18747dad2a5bcef55048847ac27bb54a187583f1694fb2af3ef9
- SSDEEP 12288:z+R+rU7N7Jd+Lyh+YkH1dVy4aAvOYxc929L22A5XXCKoSLd4Mb:KRRN71+Ysoo9i2A1X/6Mb
- MD5 SHA1 SHA512 SSDEEP
Score
5/10
Malware Config
Signatures
- Suspicious use of SetThreadContext 1 IoCs
description pid Process procid_target PID 4704 set thread context of 2256 4704 Setup.exe 83 - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2256 dllhost.exe 2256 dllhost.exe - Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 4704 wrote to memory of 2256 4704 Setup.exe 83 PID 4704 wrote to memory of 2256 4704 Setup.exe 83 PID 4704 wrote to memory of 2256 4704 Setup.exe 83 PID 4704 wrote to memory of 2256 4704 Setup.exe 83 PID 4704 wrote to memory of 2256 4704 Setup.exe 83 PID 4704 wrote to memory of 2256 4704 Setup.exe 83 PID 4704 wrote to memory of 2256 4704 Setup.exe 83 PID 4704 wrote to memory of 2256 4704 Setup.exe 83 PID 4704 wrote to memory of 2256 4704 Setup.exe 83 PID 4704 wrote to memory of 2256 4704 Setup.exe 83 PID 4704 wrote to memory of 2256 4704 Setup.exe 83 PID 4704 wrote to memory of 2256 4704 Setup.exe 83 PID 4704 wrote to memory of 2256 4704 Setup.exe 83 PID 4704 wrote to memory of 2256 4704 Setup.exe 83 PID 4704 wrote to memory of 2256 4704 Setup.exe 83 PID 4704 wrote to memory of 2256 4704 Setup.exe 83 PID 4704 wrote to memory of 2256 4704 Setup.exe 83 PID 4704 wrote to memory of 2256 4704 Setup.exe 83 PID 4704 wrote to memory of 2256 4704 Setup.exe 83 PID 4704 wrote to memory of 2256 4704 Setup.exe 83 PID 4704 wrote to memory of 2256 4704 Setup.exe 83 PID 4704 wrote to memory of 2256 4704 Setup.exe 83 PID 4704 wrote to memory of 2256 4704 Setup.exe 83 PID 4704 wrote to memory of 2256 4704 Setup.exe 83 PID 4704 wrote to memory of 2256 4704 Setup.exe 83 PID 4704 wrote to memory of 2256 4704 Setup.exe 83 PID 4704 wrote to memory of 2256 4704 Setup.exe 83 PID 4704 wrote to memory of 2256 4704 Setup.exe 83 PID 4704 wrote to memory of 2256 4704 Setup.exe 83 PID 4704 wrote to memory of 2256 4704 Setup.exe 83 PID 4704 wrote to memory of 2256 4704 Setup.exe 83 PID 4704 wrote to memory of 2256 4704 Setup.exe 83 PID 4704 wrote to memory of 2256 4704 Setup.exe 83 PID 4704 wrote to memory of 2256 4704 Setup.exe 83 PID 4704 wrote to memory of 2256 4704 Setup.exe 83 PID 4704 wrote to memory of 2256 4704 Setup.exe 83 PID 4704 wrote to memory of 2256 4704 Setup.exe 83 PID 4704 wrote to memory of 2256 4704 Setup.exe 83 PID 4704 wrote to memory of 2256 4704 Setup.exe 83 PID 4704 wrote to memory of 2256 4704 Setup.exe 83 PID 4704 wrote to memory of 2256 4704 Setup.exe 83 PID 4704 wrote to memory of 2256 4704 Setup.exe 83 PID 4704 wrote to memory of 2256 4704 Setup.exe 83 PID 4704 wrote to memory of 2256 4704 Setup.exe 83 PID 4704 wrote to memory of 2256 4704 Setup.exe 83 PID 4704 wrote to memory of 2256 4704 Setup.exe 83 PID 4704 wrote to memory of 2256 4704 Setup.exe 83 PID 4704 wrote to memory of 2256 4704 Setup.exe 83 PID 4704 wrote to memory of 2256 4704 Setup.exe 83 PID 4704 wrote to memory of 2256 4704 Setup.exe 83 PID 4704 wrote to memory of 2256 4704 Setup.exe 83 PID 4704 wrote to memory of 2256 4704 Setup.exe 83 PID 4704 wrote to memory of 2256 4704 Setup.exe 83 PID 4704 wrote to memory of 2256 4704 Setup.exe 83 PID 4704 wrote to memory of 2256 4704 Setup.exe 83 PID 4704 wrote to memory of 2256 4704 Setup.exe 83 PID 4704 wrote to memory of 2256 4704 Setup.exe 83 PID 4704 wrote to memory of 2256 4704 Setup.exe 83 PID 4704 wrote to memory of 2256 4704 Setup.exe 83 PID 4704 wrote to memory of 2256 4704 Setup.exe 83 PID 4704 wrote to memory of 2256 4704 Setup.exe 83 PID 4704 wrote to memory of 2256 4704 Setup.exe 83 PID 4704 wrote to memory of 2256 4704 Setup.exe 83 PID 4704 wrote to memory of 2256 4704 Setup.exe 83