General
- Target setupSHPAnalyser_0.3.0.491.exe
- Size 1.5MB
- Sample260703-k2pjdsbs2k
- SHA256 6ae49ad054d56b799e629e65b8408d806f578152ff523f3a1a9a515e38f3e8ca
- MD5 b9cfaf7ed448e8964a259ea019f0ee93
- SHA1 314cde277e0e7362c657e4b777e3dd08ab580ed7
- SHA512 831f3e34a441dca5589c28abb1930f61cf371e3c8cc6c86ca53587eafb60303cc263859955fb61d3282cac81b1c3f497fe332c98803426980a44e56b7be87985
- SSDEEP 24576:5naBiuLI4WydToE2/HFnac2RP87YSl08L4sR1VQdspCJY4RM/PtUkS3rJQBtUkBw:5aEmI4DqhH5awMSR4sIslYinXBgJ
- TLSH T1C775334365A0E8B9E013E6715D79CA60C6BB3E221431205971DEBE1C1B3FDFA945FB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
setupSHPAnalyser_0.3.0.491.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
setupSHPAnalyser_0.3.0.491.exe
Resource
win11ltsc2024-20260629-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target setupSHPAnalyser_0.3.0.491.exe
- Size 1.5MB
- SHA256 6ae49ad054d56b799e629e65b8408d806f578152ff523f3a1a9a515e38f3e8ca
- MD5 b9cfaf7ed448e8964a259ea019f0ee93
- SHA1 314cde277e0e7362c657e4b777e3dd08ab580ed7
- SHA512 831f3e34a441dca5589c28abb1930f61cf371e3c8cc6c86ca53587eafb60303cc263859955fb61d3282cac81b1c3f497fe332c98803426980a44e56b7be87985
- SSDEEP 24576:5naBiuLI4WydToE2/HFnac2RP87YSl08L4sR1VQdspCJY4RM/PtUkS3rJQBtUkBw:5aEmI4DqhH5awMSR4sIslYinXBgJ
- TLSH T1C775334365A0E8B9E013E6715D79CA60C6BB3E221431205971DEBE1C1B3FDFA945FB22
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.