General
- Target csog-launcher.msi
- Size 9.3MB
- Sample260629-w1etcab13x
- SHA256 2f81ebc0505e44588cd14b8bb557a9a9f1e2b3607295c60e1649b6872cc57cc2
- MD5 85fecf9427c6231c64fe68ee13b4e415
- SHA1 75d831a78f483ed46fc393e08a366b5731a7cdc6
- SHA512 f84ef1e528015d506fe322e9389e425d06efa0a433f200db5c093051167f121f459f3fe39b86648fce59d104a1bf9782bbc4e325220b9d714ec8b6e0bfe34764
- SSDEEP 196608:2vnn3at5WfFd2Hp8TnJaydWTWJzN1+OT6ThRj:2vnn34Gdgp6aL6VN1+Ocj
- TLSH T1C7A633B77F459B02C8276DB29072E75ACB3CADA05B6150B307813A61DDF26D10EE39E4
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
csog-launcher.msi
Resource
win10v2004-20260513-en
20 signatures
150 seconds
Behavioral task
behavioral2
Sample
csog-launcher.msi
Resource
win11ltsc2024-20260629-en
23 signatures
150 seconds
Malware Config
Targets
-
- Target csog-launcher.msi
- Size 9.3MB
- SHA256 2f81ebc0505e44588cd14b8bb557a9a9f1e2b3607295c60e1649b6872cc57cc2
- MD5 85fecf9427c6231c64fe68ee13b4e415
- SHA1 75d831a78f483ed46fc393e08a366b5731a7cdc6
- SHA512 f84ef1e528015d506fe322e9389e425d06efa0a433f200db5c093051167f121f459f3fe39b86648fce59d104a1bf9782bbc4e325220b9d714ec8b6e0bfe34764
- SSDEEP 196608:2vnn3at5WfFd2Hp8TnJaydWTWJzN1+OT6ThRj:2vnn34Gdgp6aL6VN1+Ocj
- TLSH T1C7A633B77F459B02C8276DB29072E75ACB3CADA05B6150B307813A61DDF26D10EE39E4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks whether UAC is enabled
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Active Setup
1Event Triggered Execution
1Installer Packages
1Privilege Escalation
Boot or Logon Autostart Execution
1Active Setup
1Event Triggered Execution
1Installer Packages
1