General
- Target level.msi
- Size 35.4MB
- Sample260708-w1m5qaey7k
- SHA256 1d6467a6eea728a58419a1e48ca839df0f243d30e65168d9b72a66a8893df769
- MD5 c99c471f313b154ea9c35f24b48fdadc
- SHA1 1d966b5b1e3ba28af3177feadff72a49fecbbeee
- SHA512 90650b06053b3d712dec00a3ace22adbbf4f8ed7015471a51051cf4cae71f29bd307b2895ec0f0f95ebff43098a23a2cbec72d4e7d691208c4d9caf8f69076e9
- SSDEEP 196608:0G0V/cEJSqm1GWL/tm4zDOzFipAOMf1DexIbVvbRMIIvE2ML+z8r7yB4JR4f9uFi:0ZkEstTf+gxIbBtMpoJR4f9uF/ONOTs
- TLSH T177877C17E96504E5C1AEC174CA679613FB717C49473427DB3BA4A6282F3BBE06E7A300
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
level.msi
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
level.msi
Resource
win11ltsc2024-20260706-en
Malware Config
Targets
-
- Target level.msi
- Size 35.4MB
- SHA256 1d6467a6eea728a58419a1e48ca839df0f243d30e65168d9b72a66a8893df769
- MD5 c99c471f313b154ea9c35f24b48fdadc
- SHA1 1d966b5b1e3ba28af3177feadff72a49fecbbeee
- SHA512 90650b06053b3d712dec00a3ace22adbbf4f8ed7015471a51051cf4cae71f29bd307b2895ec0f0f95ebff43098a23a2cbec72d4e7d691208c4d9caf8f69076e9
- SSDEEP 196608:0G0V/cEJSqm1GWL/tm4zDOzFipAOMf1DexIbVvbRMIIvE2ML+z8r7yB4JR4f9uFi:0ZkEstTf+gxIbBtMpoJR4f9uF/ONOTs
- TLSH T177877C17E96504E5C1AEC174CA679613FB717C49473427DB3BA4A6282F3BBE06E7A300
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Active Setup
1Event Triggered Execution
1Installer Packages
1Privilege Escalation
Boot or Logon Autostart Execution
1Active Setup
1Event Triggered Execution
1Installer Packages
1Defense Evasion
Modify Registry
3Subvert Trust Controls
2Install Root Certificate
2System Binary Proxy Execution
1Msiexec
1