General
- Target install.exe
- Size 225KB
- Sample260418-ldff9act6m
- SHA256 2e6c8e34a50c71b244469bc61b81b1ffd46ad6ba3e269aa30580574e3882bf57
- MD5 80622f2485c373fefe0ea4f3c3218f4f
- SHA1 6981bc2c135ad420bb2a628fa6c4ed0a7d37f32f
- SHA512 18af559aeaab19e0e63b4a210b46670343820054eff114679eca0a9cf4eb6ea4948f64a155167ae9ae8bee211d8efedbc5fa4ff70e717e9cb65b35051686f145
- SSDEEP 3072:E6GEtNEXN4wCq5/v46QC2mCm/lY9Kkj3c6QQaWAk0Ag5qAWKGETBKnF58it3kzMx:hGYk4wCq5x+9T3bQQaNlTwNt3kz
- TLSH T10F3459217C81C032C1B31934C9E5D2F06A7CBD708E658A8F63987F2F7A771926625E67
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
install.exe
Resource
win10v2004-20260130-en
24 signatures
900 seconds
Behavioral task
behavioral2
Sample
install.exe
Resource
win11-20260130-en
13 signatures
900 seconds
Malware Config
Targets
-
- Target install.exe
- Size 225KB
- SHA256 2e6c8e34a50c71b244469bc61b81b1ffd46ad6ba3e269aa30580574e3882bf57
- MD5 80622f2485c373fefe0ea4f3c3218f4f
- SHA1 6981bc2c135ad420bb2a628fa6c4ed0a7d37f32f
- SHA512 18af559aeaab19e0e63b4a210b46670343820054eff114679eca0a9cf4eb6ea4948f64a155167ae9ae8bee211d8efedbc5fa4ff70e717e9cb65b35051686f145
- SSDEEP 3072:E6GEtNEXN4wCq5/v46QC2mCm/lY9Kkj3c6QQaWAk0Ag5qAWKGETBKnF58it3kzMx:hGYk4wCq5x+9T3bQQaNlTwNt3kz
- TLSH T10F3459217C81C032C1B31934C9E5D2F06A7CBD708E658A8F63987F2F7A771926625E67
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.