General
- Target SETUP.zip
- Size 16.3MB
- Sample260707-rmtccsbv71
- SHA256 8a63e287500e0342f4aa5e5c9efcf1df2235cfa8b63cc2367c4f6eb15269fd82
- MD5 32dc766439c74445e7c2ec41ceee94ce
- SHA1 09894f21e224ef177d5d969e30623c47962254c6
- SHA512 c4df3eb849a03ea925df52a7c3c4545dbeb22cc55642f52694edf80fbfc7988a1efc28839c455b477383b8e160ee085afb7b555057023693d2ef803101c5cc73
- SSDEEP 393216:uqPqABvRt8pmaFYlry7NTnhA+Trw6NXC8eFBxu:uA9RtUHhTh5TrnXC8eU
- TLSH T107073385A4660FD6E89D107891EF8B0763DAEF0B8103676B5364E3AB3EF37F49A15404
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Setup.exe
Resource
win10v2004-20260513-en
4 signatures
300 seconds
Behavioral task
behavioral2
Sample
Setup.exe
Resource
win10ltsc2021-20260513-en
4 signatures
300 seconds
Behavioral task
behavioral3
Sample
Setup.exe
Resource
win11-20260513-en
4 signatures
300 seconds
Behavioral task
behavioral4
Sample
Setup.exe
Resource
win11ltsc2024-20260706-en
14 signatures
300 seconds
Malware Config
Targets
-
- Target Setup.exe
- Size 94KB
- SHA256 8c1b9b8e72264e27253a7cc14d6f9a560a127ebd9f8bcec81faba94710c19a47
- MD5 eba77a34e9b8aa78fce520d1431fc68b
- SHA1 215105e2640cd6da8adc1ea9ddafeb08c4d50f9b
- SHA512 fa66a42dd71fc862c218777b572f143144a7de0c5d8630061a554e6ebb9ad4557d810e7ca75598254231cb41dec2391c49a362206b8275742b5a5b92ee33417f
- SSDEEP 1536:ZaakYDoIhIxHHWMpdPa5wiE21M8kJIGFvb1Cw3/73sJxy+C:FDpSwMpdCq/IM8uIGfN/73sJTC
- TLSH T1A593D541E62DBDDDE508D4310A75E0F25E24EC3176C0A51EA7F37F0629726A3F90A93A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Suspicious use of NtSetInformationThreadHideFromDebugger