Overview
overview
6Static
static
1avast_secu...up.exe
windows10-2004-x64
6avast_secu...up.exe
windows11-21h2-x64
6$PLUGINSDI...er.exe
windows10-2004-x64
3$PLUGINSDI...er.exe
windows11-21h2-x64
3$PLUGINSDI...up.exe
windows10-2004-x64
4$PLUGINSDI...up.exe
windows11-21h2-x64
4$PLUGINSDI...ui.dll
windows10-2004-x64
1$PLUGINSDI...ui.dll
windows11-21h2-x64
1Analysis
- max time kernel
149s - max time network
140s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
06/06/2026, 18:12
Static task
static1
Behavioral task
behavioral1
Sample
avast_secure_browser_setup.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
avast_secure_browser_setup.exe
Resource
win11-20260513-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/AvastBrowserInstaller.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/AvastBrowserInstaller.exe
Resource
win11-20260513-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/AvastBrowserUpdateSetup.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/AvastBrowserUpdateSetup.exe
Resource
win11-20260513-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/sciterui.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/sciterui.dll
Resource
win11-20260513-en
General
- Target $PLUGINSDIR/AvastBrowserInstaller.exe
- Size 11.1MB
- Sample260606-wtk2sabv2s
- SHA256 65a1bf6f3657c05c6eaf4a3031038b61d58b4ba1007c46fa815585ff6b2f58c8
- MD5 6c0a391f7d0d91e4279404200985fb2e
- SHA1 77ffa5a140f0d4d37093c7f712d4b1b98604e1ed
- SHA512 1fc9f1144c792179a8322a4d024593d0b2f03400b4735382f85747663fd4275cebe483998ed5ca35977a9f3580c4b4b3fc788110e93f63135135ba1452e363dd
- SSDEEP 196608:d07mA7UN+uifSJiF7rojV9N7S0YBLAgq7Q83qmHt8Bns33HkMRKgW7j/PzRMfoFI:+7Upe+9/3HagmRMQOrqN4
- TLSH T12DC6AE337A81C0B9C65203B0564CE39987FEFAB02B7251D7A7982B5C1F784D1BB25A53
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language AvastBrowserInstaller.exe - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2084 AvastBrowserInstaller.exe 2084 AvastBrowserInstaller.exe