General
- Target SWAInstaller.exe
- Size 2.8MB
- Sample260624-r1wpmscy81
- SHA256 7d437eb60431cb9d9bdcbc34b25a3e01dd9943ec7ed035c635167209198a323f
- MD5 63857f085967d0b0442c4696a6663cbe
- SHA1 1c9f377c080c2a049e501c326ad396fd5d7b6b68
- SHA512 2068905a666ec0117d9bc8e8426446fb40eb063bbe5afc931cf0469860a1eab8113323b001d0f38e09337f5e54d81856efd5f0d1ed61c57735a0107ef5c940f8
- SSDEEP 49152:HDXrKLYwGxYljUAFH144EoIA6Z6cAU2GTJYBCBMMLY34ybwFfbR5:HDb0pGxkjvFH1bEobJEvJtBMMLY3fba
- TLSH T143D5DF1BE289DF2DF035D531A7B5D990D63BEF11941AC863C5AC39C8CE3B090396EA46
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
SWAInstaller.exe
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
SWAInstaller.exe
Resource
win11ltsc2024-20260618-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target SWAInstaller.exe
- Size 2.8MB
- SHA256 7d437eb60431cb9d9bdcbc34b25a3e01dd9943ec7ed035c635167209198a323f
- MD5 63857f085967d0b0442c4696a6663cbe
- SHA1 1c9f377c080c2a049e501c326ad396fd5d7b6b68
- SHA512 2068905a666ec0117d9bc8e8426446fb40eb063bbe5afc931cf0469860a1eab8113323b001d0f38e09337f5e54d81856efd5f0d1ed61c57735a0107ef5c940f8
- SSDEEP 49152:HDXrKLYwGxYljUAFH144EoIA6Z6cAU2GTJYBCBMMLY34ybwFfbR5:HDb0pGxkjvFH1bEobJEvJtBMMLY3fba
- TLSH T143D5DF1BE289DF2DF035D531A7B5D990D63BEF11941AC863C5AC39C8CE3B090396EA46
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks whether UAC is enabled