General
- Target wazuh-agent-4.9.0-1.msi
- Size 6.9MB
- Sample260701-pj56msd19k
- SHA256 3c2902fa2bd3bccd7c4001a9b01219b82df347f5f6e0a96760ad42259fbb3829
- MD5 f34f5e832ef863cc4638b62321225457
- SHA1 b1a5928f983b0dc251258fbdc2e3056bbacf02b8
- SHA512 9f9c77d3033d4eb5ea9668456cdbaccc03f840b1b89821b6a3d02bb72f1d4aa5787f94e4f92c726547f1f01f494ddf190605eb5aa8fdcd2c0a878856ccf51ff4
- SSDEEP 196608:Vrh0bGmf6ajw95AOj59BjH+HnBNzRtU0Ex9:Ja5ia0P7frIBXtU0Ex
- TLSH T1A376331139854837CAAE1B767D5942309F3C6D70AA31C0EB334CB52D1F396906BB7BA6
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
wazuh-agent-4.9.0-1.msi
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
wazuh-agent-4.9.0-1.msi
Resource
win11ltsc2024-20260629-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target wazuh-agent-4.9.0-1.msi
- Size 6.9MB
- SHA256 3c2902fa2bd3bccd7c4001a9b01219b82df347f5f6e0a96760ad42259fbb3829
- MD5 f34f5e832ef863cc4638b62321225457
- SHA1 b1a5928f983b0dc251258fbdc2e3056bbacf02b8
- SHA512 9f9c77d3033d4eb5ea9668456cdbaccc03f840b1b89821b6a3d02bb72f1d4aa5787f94e4f92c726547f1f01f494ddf190605eb5aa8fdcd2c0a878856ccf51ff4
- SSDEEP 196608:Vrh0bGmf6ajw95AOj59BjH+HnBNzRtU0Ex9:Ja5ia0P7frIBXtU0Ex
- TLSH T1A376331139854837CAAE1B767D5942309F3C6D70AA31C0EB334CB52D1F396906BB7BA6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Modifies file permissions
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.