General
- Target Cloudflare_WARP_2026.3.851.0.msi
- Size 129.4MB
- Sample260623-w1jsasft9t
- SHA256 381178d3a2ebb0aab4c11d2125f2fa247ffeccc561b4195155901c4b60e3941c
- MD5 c23b6c7dd8fb1742999f2a36abe8aa7b
- SHA1 77b35a34987810873162e0df52a12da1455be580
- SHA512 1dd7d2a97f49fc6f4a24fa9da188023be2f21753c54c4727c5ed959818f3fa93566e49e4414853884ed3273d34a10cdd3215236243cafb8a7a957b1946c1ad05
- SSDEEP 3145728:WSBkxCbzSBXWH9T9G24tsljoYppeFPb8llVHvsuwro1WazaDnWb+cLKTWVenX26:WSBB2BA9CW+gVHh5xawVGXh
- TLSH T1C45833DA2111CC6EF5768C3B483D7A5895763DB4962298E303F4B3BA5873AD1E673203
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Cloudflare_WARP_2026.3.851.0.msi
Resource
win10v2004-20260513-en
20 signatures
900 seconds
Behavioral task
behavioral2
Sample
Cloudflare_WARP_2026.3.851.0.msi
Resource
win11ltsc2024-20260618-en
21 signatures
900 seconds
Malware Config
Targets
-
- Target Cloudflare_WARP_2026.3.851.0.msi
- Size 129.4MB
- SHA256 381178d3a2ebb0aab4c11d2125f2fa247ffeccc561b4195155901c4b60e3941c
- MD5 c23b6c7dd8fb1742999f2a36abe8aa7b
- SHA1 77b35a34987810873162e0df52a12da1455be580
- SHA512 1dd7d2a97f49fc6f4a24fa9da188023be2f21753c54c4727c5ed959818f3fa93566e49e4414853884ed3273d34a10cdd3215236243cafb8a7a957b1946c1ad05
- SSDEEP 3145728:WSBkxCbzSBXWH9T9G24tsljoYppeFPb8llVHvsuwro1WazaDnWb+cLKTWVenX26:WSBB2BA9CW+gVHh5xawVGXh
- TLSH T1C45833DA2111CC6EF5768C3B483D7A5895763DB4962298E303F4B3BA5873AD1E673203
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Creates new service(s)
-
Executes dropped EXE
-
Loads dropped DLL
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Installer Packages
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Installer Packages
1