General
- Target Visual-C-Runtimes-All-in-One-Dec-2025.zip
- Size 82.2MB
- Sample260503-apy7yshy8w
- SHA256 8dd571b8bd1093a1676cad0295f2660a93084b2d295f00f3e56523588010de09
Malware Config
Targets
-
- Target Visual-C-Runtimes-All-in-One-Dec-2025.zip
- Size 82.2MB
- SHA256 8dd571b8bd1093a1676cad0295f2660a93084b2d295f00f3e56523588010de09
Score1/10 -
- Target install_all.bat
- Size 1KB
- SHA256 492ee4c16ac45a5483088583c9caa08252d3a1bb3922dbbec834d61673538f17
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.
-
Drops file in System32 directory
-
- Target vcredist2005_x64.exe
- Size 3.0MB
- SHA256 0551a61c85b718e1fa015b0c3e3f4c4eea0637055536c00e7969286b4fa663e0
Score7/10-
Loads dropped DLL
-
Adds Run key to start application
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target vcredist2005_x86.exe
- Size 2.6MB
- SHA256 4ee4da0fe62d5fa1b5e80c6e6d88a4a2f8b3b140c35da51053d0d7b72a381d29
Score7/10-
Loads dropped DLL
-
Adds Run key to start application
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target vcredist2008_x64.exe
- Size 5.0MB
- SHA256 b811f2c047a3e828517c234bd4aa4883e1ec591d88fad21289ae68a6915a6665
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
- Target vcredist2008_x86.exe
- Size 4.3MB
- SHA256 6b3e4c51c6c0e5f68c8a72b497445af3dbf976394cbb62aa23569065c28deeb6
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target vcredist2010_x64.exe
- Size 9.8MB
- SHA256 cc7ec044218c72a9a15fca2363baed8fc51095ee3b2a7593476771f9eba3d223
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.
-
- Target vcredist2010_x86.exe
- Size 8.6MB
- SHA256 67313b3d1bc86e83091e8de22981f14968f1a7fb12eb7ad467754c40cd94cc3d
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.
-
- Target vcredist2012_x64.exe
- Size 6.9MB
- SHA256 681be3e5ba9fd3da02c09d7e565adfa078640ed66a0d58583efad2c1e3cc4064
Score4/10 -
- Target vcredist2012_x86.exe
- Size 6.3MB
- SHA256 b924ad8062eaf4e70437c8be50fa612162795ff0839479546ce907ffa8d6e386
Score4/10 -
- Target vcredist2013_x64.exe
- Size 6.9MB
- SHA256 a4bba7701e355ae29c403431f871a537897c363e215cafe706615e270984f17c
Score4/10 -
- Target vcredist2013_x86.exe
- Size 6.2MB
- SHA256 53b605d1100ab0a88b867447bbf9274b5938125024ba01f5105a9e178a3dcdbd
Score4/10 -
- Target vcredist2015_2017_2019_2022_x64.exe
- Size 17.7MB
- SHA256 8995548dfffcde7c49987029c764355612ba6850ee09a7b6f0fddc85bdc5c280
Score4/10 -
- Target vcredist2015_2017_2019_2022_x86.exe
- Size 6.6MB
- SHA256 e7267c1bdf9237c0b4a28cf027c382b97aa909934f84f1c92d3fb9f04173b33e
Score4/10
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Installer Packages
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Installer Packages
1