General
- Target tsetup.6.3.6.exe
- Size 43.2MB
- Sample260628-pcvfkagy8v
- SHA256 b9dd2bf54a56662308069d61dd6dac1d5a1b70e0b112588d32517fc78fbce7ed
- MD5 0fa6c20d72c8648c7b036cad3a7e6611
- SHA1 6c01f7fb222fb60792f507ceb0d2def197df3210
- SHA512 0ff6ab2534170143f706d22de21c8bbd12e4a86a7f9d381294c97c10ab3f78af9da765b8f29c1301b87b51af61b36a42009a003cce615aa08f5b377daaa5eb48
- SSDEEP 786432:NZp2hytTDFzUvAPL3RFtqm/npcheEnZ2ikXsS1y66lVMNGYAvR1lU4tYljXU:N3cyNDFAvStvpchpZtkXsS1MzOMp1lRF
- TLSH T147A73323E14E7739E168563519A7AA110C3F6E21A40F8DA7DAF04D8CDF1A0942DBFE53
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
tsetup.6.3.6.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
tsetup.6.3.6.exe
Resource
win11ltsc2024-20260618-en
23 signatures
150 seconds
Malware Config
Targets
-
- Target tsetup.6.3.6.exe
- Size 43.2MB
- SHA256 b9dd2bf54a56662308069d61dd6dac1d5a1b70e0b112588d32517fc78fbce7ed
- MD5 0fa6c20d72c8648c7b036cad3a7e6611
- SHA1 6c01f7fb222fb60792f507ceb0d2def197df3210
- SHA512 0ff6ab2534170143f706d22de21c8bbd12e4a86a7f9d381294c97c10ab3f78af9da765b8f29c1301b87b51af61b36a42009a003cce615aa08f5b377daaa5eb48
- SSDEEP 786432:NZp2hytTDFzUvAPL3RFtqm/npcheEnZ2ikXsS1y66lVMNGYAvR1lU4tYljXU:N3cyNDFAvStvpchpZtkXsS1MzOMp1lRF
- TLSH T147A73323E14E7739E168563519A7AA110C3F6E21A40F8DA7DAF04D8CDF1A0942DBFE53
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Drops desktop.ini file(s)
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.