General
- Target WiRED-Setup-1.0.0.exe
- Size 14.9MB
- Sample260706-pfcd6aez4y
- SHA256 deaa9c0fb28a0a6e08ab3ccbf0e839532267fa6d0fb02a7df8131ef3e0db0f8c
- MD5 d66cbadfda8d9153ba47a7723dc8ff94
- SHA1 6ee66d8c99ac95fec173b51ce4355c97df3b1443
- SHA512 24c8c946192b75b734015fafafb415ff0d641cb46c83513ee274ec99e2198a5e0011e18b1f92abe9e8d0716a2cf09817c34f3b4a2ef77c30d14f4179dd5bf72a
- SSDEEP 196608:LQX3gJSjX20pLH3HMn9BPTY4u6rGYSYrDM+6e6DZbTQblKSYssi9hWJIXI3kG9tg:LqXBLH30rDrvbDMPbT6lKhiXWoI3kGs
- TLSH T18AF6333FF28B753EE06A69393A76A114553F6A2165160C4697ECF88CCF250702D3E78B
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
WiRED-Setup-1.0.0.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
WiRED-Setup-1.0.0.exe
Resource
win11ltsc2024-20260629-en
21 signatures
150 seconds
Malware Config
Targets
-
- Target WiRED-Setup-1.0.0.exe
- Size 14.9MB
- SHA256 deaa9c0fb28a0a6e08ab3ccbf0e839532267fa6d0fb02a7df8131ef3e0db0f8c
- MD5 d66cbadfda8d9153ba47a7723dc8ff94
- SHA1 6ee66d8c99ac95fec173b51ce4355c97df3b1443
- SHA512 24c8c946192b75b734015fafafb415ff0d641cb46c83513ee274ec99e2198a5e0011e18b1f92abe9e8d0716a2cf09817c34f3b4a2ef77c30d14f4179dd5bf72a
- SSDEEP 196608:LQX3gJSjX20pLH3HMn9BPTY4u6rGYSYrDM+6e6DZbTQblKSYssi9hWJIXI3kG9tg:LqXBLH30rDrvbDMPbT6lKhiXWoI3kGs
- TLSH T18AF6333FF28B753EE06A69393A76A114553F6A2165160C4697ECF88CCF250702D3E78B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.