Analysis
- max time kernel
149s - max time network
150s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
02/06/2026, 12:17
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
SilentSetup.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
General
- Target SilentSetup.exe
- Size 8.9MB
- Sample260602-pf13hsd18r
- SHA256 f41e0ef9fbc2828d03c28047b3bb5122c7c4fc8a3fb96e163c6caaf4be3606ab
- MD5 6f42a58a212a552c255d304835e7783f
- SHA1 05a28daa6a562b37822eb3ece41bf1daa7e5629d
- SHA512 e6b900a634c29bd4b2e4434fd012ba6bd499ea571a233bcd9a4c4d8a70543d829f04fa398dd5c68663af5188b208f625751ad9fd9de1357eb614add4bf9a30e5
- SSDEEP 98304:NOGeuuh2QtBs8K6xGvUb1gKMCDK/pf81/GMaeRlKNotsuwMOncuggvI3w:NOG7uh2gu8K6ovUb6KM61/GMNnKNTLI
- TLSH T197968D6B2BB940E5D03BC17CCA92CB46F6B270551B215BDB45A1435E2F33BE44E3EA21
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Detects Shellter Trojan 2 IoCs
resource yara_rule behavioral2/memory/3468-0-0x0000000000890000-0x0000000000918000-memory.dmp family_shellter_trojan behavioral2/memory/3468-1-0x0000000000890000-0x0000000000918000-memory.dmp family_shellter_trojan - Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
pid Process 3468 SilentSetup.exe - Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 3468 SilentSetup.exe