General
- Target MSIAfterburnerInstaller466.exe
- Size 42.5MB
- Sample260702-wehm4sbs2t
- SHA256 459f8562dd7ef319de47e7064c6c010d937f6df9e02735e9e533517fbdca9f40
- MD5 be2481b8229a6a2dc0634801049d11b3
- SHA1 5671a21e0e551bffe7278178ad74c8a8c9ed12c3
- SHA512 2ae7324bcad8a0ba25cb0189f33b27ddc226d1bd5f76a766e65d602826a7fbce936fafbd72e2e7966854d7ac288710cbb7837b5eac162dca76f26e167ac01480
- SSDEEP 786432:Tlz+WV8pMeAwLtdDjgMA1ybO/DEHKd5e5a7PBgK+l89hEV9yA0j09Y3:Tlz+WG+eAfMA1yC/DtdY5IBWK9CVsAfC
- TLSH T17DA733287110573DCEB78239A12FC95B54397C4C2A606B2C3A7EB76A1EB4344D42F99E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
MSIAfterburnerInstaller466.exe
Resource
win11ltsc2024-20260629-fr
3 signatures
900 seconds
Behavioral task
behavioral2
Sample
MSIAfterburnerInstaller466.exe
Resource
win10ltsc2021-20260513-fr
3 signatures
900 seconds
Behavioral task
behavioral3
Sample
MSIAfterburnerInstaller466.exe
Resource
win11-20260513-fr
28 signatures
900 seconds
Malware Config
Targets
-
- Target MSIAfterburnerInstaller466.exe
- Size 42.5MB
- SHA256 459f8562dd7ef319de47e7064c6c010d937f6df9e02735e9e533517fbdca9f40
- MD5 be2481b8229a6a2dc0634801049d11b3
- SHA1 5671a21e0e551bffe7278178ad74c8a8c9ed12c3
- SHA512 2ae7324bcad8a0ba25cb0189f33b27ddc226d1bd5f76a766e65d602826a7fbce936fafbd72e2e7966854d7ac288710cbb7837b5eac162dca76f26e167ac01480
- SSDEEP 786432:Tlz+WV8pMeAwLtdDjgMA1ybO/DEHKd5e5a7PBgK+l89hEV9yA0j09Y3:Tlz+WG+eAfMA1yC/DtdY5IBWK9CVsAfC
- TLSH T17DA733287110573DCEB78239A12FC95B54397C4C2A606B2C3A7EB76A1EB4344D42F99E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1