General
- Target AnchorCAD_0.1.51_x64_en-US.msi
- Size 7.6MB
- Sample260703-sd6rrsbv7s
- SHA256 d839173bc3f7b309a3620e6b2712570d4c1d503c30df72642133807ab3b6d36c
- MD5 bc39db82c1943b23eda719897836d30f
- SHA1 756e554dfcf5205080cc7ba9637dbeb654896621
- SHA512 0b80a0fbcfe5b86d120dda801de5956fd892739134496f42dc1953bdaeb1b5950a5133dfb0b45a60874ba5df5108504d83ee75000a63204011e3b5b02f11fdbc
- SSDEEP 196608:jfzhtu9F53c5/j8I6kb5/ep4BXC2Y3RfzoQXHEuht/IChl+K4ds:jrjIy8Pxp4BXC2Y3RfMQEIIRd
- TLSH T12086331B7E808436E0722E3615B9D7B14A3EBD2057964CCB2751361DDEF1AD08E3A6E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
AnchorCAD_0.1.51_x64_en-US.msi
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
AnchorCAD_0.1.51_x64_en-US.msi
Resource
win11ltsc2024-20260629-en
22 signatures
150 seconds
Malware Config
Targets
-
- Target AnchorCAD_0.1.51_x64_en-US.msi
- Size 7.6MB
- SHA256 d839173bc3f7b309a3620e6b2712570d4c1d503c30df72642133807ab3b6d36c
- MD5 bc39db82c1943b23eda719897836d30f
- SHA1 756e554dfcf5205080cc7ba9637dbeb654896621
- SHA512 0b80a0fbcfe5b86d120dda801de5956fd892739134496f42dc1953bdaeb1b5950a5133dfb0b45a60874ba5df5108504d83ee75000a63204011e3b5b02f11fdbc
- SSDEEP 196608:jfzhtu9F53c5/j8I6kb5/ep4BXC2Y3RfzoQXHEuht/IChl+K4ds:jrjIy8Pxp4BXC2Y3RfMQEIIRd
- TLSH T12086331B7E808436E0722E3615B9D7B14A3EBD2057964CCB2751361DDEF1AD08E3A6E3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks whether UAC is enabled
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
2Install Root Certificate
2System Binary Proxy Execution
1Msiexec
1