General
- Target wsasme.msi
- Size 37.2MB
- Sample260706-pe8e7sey91
- SHA256 bfbfaebbf7434d43fdea9db781e51ff6ba2ead51573d9119308f8141aa83e472
- MD5 bbaeba650147b664bd39d901516fcfe2
- SHA1 88cf4747ba47b07d94579d5c010c0e8a75a943d4
- SHA512 2a19052837b4610e47a5ef6d3336c160f3e467b1f9275b941ab9df7acf81886a631e7acd12675a9f44dde083f9ab71fc346517f516f888e9c421d2c12c748c9d
- SSDEEP 393216:Yl4cOY/3f3PwsUeDEtNyBszoXde9Z34i2rVNDHrHJU+9ebGSn9ml8AFEDfao5zKl:iNXqDye0jXH++9ebGSQFEDCosunWk0
- TLSH T1C387D012F6C44039F4A7467689BE9725DABB7C201B3194CF13E0BA9C1F31AC16A3675B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
wsasme.msi
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
wsasme.msi
Resource
win11ltsc2024-20260629-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target wsasme.msi
- Size 37.2MB
- SHA256 bfbfaebbf7434d43fdea9db781e51ff6ba2ead51573d9119308f8141aa83e472
- MD5 bbaeba650147b664bd39d901516fcfe2
- SHA1 88cf4747ba47b07d94579d5c010c0e8a75a943d4
- SHA512 2a19052837b4610e47a5ef6d3336c160f3e467b1f9275b941ab9df7acf81886a631e7acd12675a9f44dde083f9ab71fc346517f516f888e9c421d2c12c748c9d
- SSDEEP 393216:Yl4cOY/3f3PwsUeDEtNyBszoXde9Z34i2rVNDHrHJU+9ebGSn9ml8AFEDfao5zKl:iNXqDye0jXH++9ebGSQFEDCosunWk0
- TLSH T1C387D012F6C44039F4A7467689BE9725DABB7C201B3194CF13E0BA9C1F31AC16A3675B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.