General
- Target WinLiveInfo.exe
- Size 3.7MB
- Sample260705-g1h4faet5m
- SHA256 c6a9038617d6ec64d4eab74f2a20481de4c5640fdb744ef60744986fff0cabb6
- MD5 91249d0c6b203c4a6def7ab8edac41cc
- SHA1 3aadbbd2d056ac9cadb3f317740870021321b4f9
- SHA512 429b4452d3ed4bd13bbb7ca723bc73850d395ac5e5c16c4bcde30270a4a71bcd77dc6ae808640de6c9dd32bad506eb68f5909ad63c41c43615967158c80dbb0c
- SSDEEP 49152:x3IyPbAe2ORhMZLiJ6S+4tlmJBQV16sW2QsIs2:x3ICbb2II46z4tlmJBQVAsA
- TLSH T1CF06CE260A481FFDF21CAE798C79605375F48C154C78B78F6883FAC99853736872A49B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
WinLiveInfo.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
WinLiveInfo.exe
Resource
win11ltsc2024-20260629-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target WinLiveInfo.exe
- Size 3.7MB
- SHA256 c6a9038617d6ec64d4eab74f2a20481de4c5640fdb744ef60744986fff0cabb6
- MD5 91249d0c6b203c4a6def7ab8edac41cc
- SHA1 3aadbbd2d056ac9cadb3f317740870021321b4f9
- SHA512 429b4452d3ed4bd13bbb7ca723bc73850d395ac5e5c16c4bcde30270a4a71bcd77dc6ae808640de6c9dd32bad506eb68f5909ad63c41c43615967158c80dbb0c
- SSDEEP 49152:x3IyPbAe2ORhMZLiJ6S+4tlmJBQV16sW2QsIs2:x3ICbb2II46z4tlmJBQVAsA
- TLSH T1CF06CE260A481FFDF21CAE798C79605375F48C154C78B78F6883FAC99853736872A49B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Modifies powershell logging option
-
Drops file in System32 directory