General
- Target AstroCommandCenter.msi
- Size 12.2MB
- Sample260507-wyl5msgw7w
- SHA256 2e4342fc1117141b6f3d6366d9a64ae3a57683af202bfad0e90f3ae11839eb19
- MD5 b68abbb3094c91521db24a60a750618b
- SHA1 0181256a2c8840ff05961c6221fbe73d4191a6bb
- SHA512 b18498e20ddfeac5dc7488394884751f893b2f281a5838d40411414f3c8e1c894b43e62c166caf621d8aa3daeafa6b6bc38d5139ad1c1ed855f3e646eccaf966
- SSDEEP 393216:a27s9vyhLVYck1RITtrsGuMOyha+wIGs:ah9vuKc0IfOylwIG
- TLSH T16BD612359A96D526C36ACB78DC2FF7000B79FD1C5F2DD83099EA76BA96B46C42483403
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
AstroCommandCenter.msi
Resource
win10v2004-20260130-en
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
AstroCommandCenter.msi
Resource
win11-20250619-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target AstroCommandCenter.msi
- Size 12.2MB
- SHA256 2e4342fc1117141b6f3d6366d9a64ae3a57683af202bfad0e90f3ae11839eb19
- MD5 b68abbb3094c91521db24a60a750618b
- SHA1 0181256a2c8840ff05961c6221fbe73d4191a6bb
- SHA512 b18498e20ddfeac5dc7488394884751f893b2f281a5838d40411414f3c8e1c894b43e62c166caf621d8aa3daeafa6b6bc38d5139ad1c1ed855f3e646eccaf966
- SSDEEP 393216:a27s9vyhLVYck1RITtrsGuMOyha+wIGs:ah9vuKc0IfOylwIG
- TLSH T16BD612359A96D526C36ACB78DC2FF7000B79FD1C5F2DD83099EA76BA96B46C42483403
- MD5 SHA1 SHA512 SSDEEP TLSH
Executes dropped EXE
Loads dropped DLL
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.