General
- Target RealSetup_f618dc99b8eb21b93f3b49fe73c2eedc345e75c25f8f92c4011ecac8519c0e73.exe
- Size 14.8MB
- Sample260702-nj119afs8k
- SHA256 65896fe90785820295212d039706608166c379fc0726de99ad038813ef108778
- MD5 efaa1d919b533e3cc0362c955ca6edce
- SHA1 3af4970cdc59a0cabaf461fa1de3878c45838a9c
- SHA512 5bbe14633ba1dde7503ec11fe694ae8c4132e3ca976395dc444b0dfa90af161c2bfaf761bbe1e699c11070961b8d9b14b54a4cf0139f51b45fd31d9371b7ebb1
- SSDEEP 393216:VZI8sWiz81DwitiggiDpqSMpTdMbXn2a5KJOUY:V6sQzK9A
- TLSH T198F6BE69B6BC00D5E866C1BCC2965223E772B45523B057CF5A648AFA0F63BE01E7F740
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
RealSetup_f618dc99b8eb21b93f3b49fe73c2eedc345e75c25f8f92c4011ecac8519c0e73.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
RealSetup_f618dc99b8eb21b93f3b49fe73c2eedc345e75c25f8f92c4011ecac8519c0e73.exe
Resource
win11ltsc2024-20260629-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target RealSetup_f618dc99b8eb21b93f3b49fe73c2eedc345e75c25f8f92c4011ecac8519c0e73.exe
- Size 14.8MB
- SHA256 65896fe90785820295212d039706608166c379fc0726de99ad038813ef108778
- MD5 efaa1d919b533e3cc0362c955ca6edce
- SHA1 3af4970cdc59a0cabaf461fa1de3878c45838a9c
- SHA512 5bbe14633ba1dde7503ec11fe694ae8c4132e3ca976395dc444b0dfa90af161c2bfaf761bbe1e699c11070961b8d9b14b54a4cf0139f51b45fd31d9371b7ebb1
- SSDEEP 393216:VZI8sWiz81DwitiggiDpqSMpTdMbXn2a5KJOUY:V6sQzK9A
- TLSH T198F6BE69B6BC00D5E866C1BCC2965223E772B45523B057CF5A648AFA0F63BE01E7F740
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Checks whether UAC is enabled
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.