8985e0c47f17f0af83462b48bf6f265fa7164e7cb80d451076966263c6f6c34b | Triage™

Login
Reports

Overview

overview

7

Static

static

3

NotForSetup.msi

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
NotForSetup.msi
Size 501.4MB
Sample260702-h668wsdx2v
SHA256 8985e0c47f17f0af83462b48bf6f265fa7164e7cb80d451076966263c6f6c34b
MD5 e079cd8454962196e3444d2977413213
SHA1 d9f5defd4c335ff324921cc535613c86cc19aa2e
SHA512 58f9b1a7f1ea24130be69769e6d3c363b37caee4eee8563c2bef6b97190e2d5dc92c4d1f9603ab2aeb24559e995d88d23577d6f236a93aa72483101edfe92cbc
SSDEEP 12582912:kXDA1FrPi0I7xM3oiHwBiCP11dYipAxYPAkYp9xYi007mD:kTuFbi0nYXB3IF7M
TLSH
T1D9493366F4093F22F5532BF511628B79096A1D1C43F50DB2169EBF0BB83869253AC73E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery persistence privilege_escalation ransomware

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

NotForSetup.msi

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

14 signatures

300 seconds

discovery persistence privilege_escalation ransomware

Malware Config

Targets

- Target
  NotForSetup.msi
- Size 501.4MB
- SHA256 8985e0c47f17f0af83462b48bf6f265fa7164e7cb80d451076966263c6f6c34b
- MD5 e079cd8454962196e3444d2977413213
- SHA1 d9f5defd4c335ff324921cc535613c86cc19aa2e
- SHA512 58f9b1a7f1ea24130be69769e6d3c363b37caee4eee8563c2bef6b97190e2d5dc92c4d1f9603ab2aeb24559e995d88d23577d6f236a93aa72483101edfe92cbc
- SSDEEP 12582912:kXDA1FrPi0I7xM3oiHwBiCP11dYipAxYPAkYp9xYi007mD:kTuFbi0nYXB3IF7M
- TLSH
  T1D9493366F4093F22F5532BF511628B79096A1D1C43F50DB2169EBF0BB83869253AC73E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery persistence privilege_escalation ransomware
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Installer Packages

Privilege Escalation

Event Triggered Execution

Installer Packages

Defense Evasion

System Binary Proxy Execution

Msiexec

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalationransomware

© 2018-2026

Terms | Privacy