Analysis
- max time kernel
39s - max time network
42s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
26/04/2026, 18:24
Static task
static1
Behavioral task
behavioral1
Sample
avast_free_antivirus_setup_online.exe
Resource
win10v2004-20260130-en
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
avast_free_antivirus_setup_online.exe
Resource
win11-20260130-en
2 signatures
150 seconds
General
- Target avast_free_antivirus_setup_online.exe
- Size 245KB
- Sample260426-w2dmnset8z
- SHA256 263e7acd12bc66cfc6d503b54dae71067872512af7b1f64d49f1e65943f0a455
- MD5 dc0c178bbc7dfd4a85c996fd77926313
- SHA1 203d2e4f18aef00a7a12e09807c4da978076d410
- SHA512 246a1a153969e52226617bfd41508d3cd2f1ce6400189c8e0de439a0d4256e0f27045ace33b5ac59ab198dda55ff37945dde7ab10e833aaee18e68a690e8a8d1
- SSDEEP 6144:SrRG+16NMD16oK3bbLuaTBmm6QMeQPzVJ5o1V:SrRxD1rK3fL/mbXJj+V
- TLSH T1C6347B2275D08032F5B31A3419F88BB6983EBDB14F3484DF93945B6D1E30AD1AA35B67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
description ioc Process File opened for modification \??\PhysicalDrive0 avast_free_antivirus_setup_online.exe - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language avast_free_antivirus_setup_online.exe