General
- Target ReShade_Setup_6.7.3.exe
- Size 3.8MB
- Sample260425-t8a41sd131
- SHA256 56791fd065358e899c581ebefe2ad871399b7c7ae83fb85e1154c08a75a44147
- MD5 d1aade32886987db543fc171027b865d
- SHA1 816cfb69d8f262a2c6073b5f8d28e1b56a147a6d
- SHA512 788813cf2529cdc7c83726737887f453c2b681d6e7c8cb5bd1cf09e2bbd25cd50020a84340b45bf310927b7fdd0f03da5ec951f9f979bed42d5840a4a603d9d8
- SSDEEP 98304:NSZN5qt2fPnfaf65RCfC3Xs89C3RWA1aGD34OpFLoTz2:NS35CY/faARV4gijI6Fe2
- TLSH T1B20633C702D91458EAF7AF39B4324A4285B3B8822631D69836DE388C5FF0798D5357B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ReShade_Setup_6.7.3.exe
Resource
win11-20260130-en
25 signatures
150 seconds
Malware Config
Targets
-
- Target ReShade_Setup_6.7.3.exe
- Size 3.8MB
- SHA256 56791fd065358e899c581ebefe2ad871399b7c7ae83fb85e1154c08a75a44147
- MD5 d1aade32886987db543fc171027b865d
- SHA1 816cfb69d8f262a2c6073b5f8d28e1b56a147a6d
- SHA512 788813cf2529cdc7c83726737887f453c2b681d6e7c8cb5bd1cf09e2bbd25cd50020a84340b45bf310927b7fdd0f03da5ec951f9f979bed42d5840a4a603d9d8
- SSDEEP 98304:NSZN5qt2fPnfaf65RCfC3Xs89C3RWA1aGD34OpFLoTz2:NS35CY/faARV4gijI6Fe2
- TLSH T1B20633C702D91458EAF7AF39B4324A4285B3B8822631D69836DE388C5FF0798D5357B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks whether UAC is enabled
-
Suspicious use of NtSetInformationThreadHideFromDebugger
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1SIP and Trust Provider Hijacking
1