General
- Target Setup DVREMU2 Manager v1.0.0.exe
- Size 7.9MB
- Sample260626-slecgscv2w
- SHA256 8d31d34083335dc0cc3c76bd5f418846e8f4daad5a437cefd8e47df332401b08
- MD5 712694288f0a36efead1b9ba8b4c0ab0
- SHA1 543a71e15c14cb6a080f16aea554ec2f5257d6c7
- SHA512 aa73c45724196a4e7b171c403c69b7c84fbe2550e245a6bc8c0c24d4b9f474e5d0d6aef0cbe7aa7d916630c2245161066516055c9567959f01baed093f4c7b65
- SSDEEP 196608:3DU5o1HnwNOLpZtC78tC1CPwDvt3uFGCC0+pVMo:3DUm1HnwNOLpZtC78w1CPwDvt3uFRC06
- TLSH T136867D6962AC02D5E06A95F8CBD742BE82317F458BB043CF1893B9B81E33BC5167E751
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Setup DVREMU2 Manager v1.0.0.exe
Resource
win11ltsc2024-20260618-en
30 signatures
300 seconds
Malware Config
Targets
-
- Target Setup DVREMU2 Manager v1.0.0.exe
- Size 7.9MB
- SHA256 8d31d34083335dc0cc3c76bd5f418846e8f4daad5a437cefd8e47df332401b08
- MD5 712694288f0a36efead1b9ba8b4c0ab0
- SHA1 543a71e15c14cb6a080f16aea554ec2f5257d6c7
- SHA512 aa73c45724196a4e7b171c403c69b7c84fbe2550e245a6bc8c0c24d4b9f474e5d0d6aef0cbe7aa7d916630c2245161066516055c9567959f01baed093f4c7b65
- SSDEEP 196608:3DU5o1HnwNOLpZtC78tC1CPwDvt3uFGCC0+pVMo:3DUm1HnwNOLpZtC78w1CPwDvt3uFRC06
- TLSH T136867D6962AC02D5E06A95F8CBD742BE82317F458BB043CF1893B9B81E33BC5167E751
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops desktop.ini file(s)
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.