General
- Target WT (1).exe
- Size 921.3MB
- Sample260702-wjer1sbt2s
- SHA256 dc6d0558e4e58513b108f4aa8e4c10f68963a7b58186978cea4c144fc117a2b0
- MD5 693ffbd5ed7fb065c84885261081beab
- SHA1 e75f5b981efecf2b84d8ed1aa373bfcfadd3801e
- SHA512 e889b2cda174e29ba7a09971c3ec2c1016d9f92e4e3c719f56bece6062702c09a0132bbb32bf1a1f980158d288f8226f0921e572cd7b60874cf27cf14032eead
- SSDEEP 25165824:YrIRNZVr4v4guey/cF9lZZTCHqk8rD57aRRwj7sTQIoEWQ1y1OT:Y8Zt4v4gxy/cPlOdADoRRVTQ0N
- TLSH T1D5A933A76367287DDC2954729961D280D03F4E739663E812CBCDF106DB7EBB0122F19A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
WT (1).exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target WT (1).exe
- Size 921.3MB
- SHA256 dc6d0558e4e58513b108f4aa8e4c10f68963a7b58186978cea4c144fc117a2b0
- MD5 693ffbd5ed7fb065c84885261081beab
- SHA1 e75f5b981efecf2b84d8ed1aa373bfcfadd3801e
- SHA512 e889b2cda174e29ba7a09971c3ec2c1016d9f92e4e3c719f56bece6062702c09a0132bbb32bf1a1f980158d288f8226f0921e572cd7b60874cf27cf14032eead
- SSDEEP 25165824:YrIRNZVr4v4guey/cF9lZZTCHqk8rD57aRRwj7sTQIoEWQ1y1OT:Y8Zt4v4gxy/cPlOdADoRRVTQ0N
- TLSH T1D5A933A76367287DDC2954729961D280D03F4E739663E812CBCDF106DB7EBB0122F19A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of NtSetInformationThreadHideFromDebugger