General
- Target Harmless Asset Manager_3.7.0_x64-setup.exe
- Size 4.0MB
- Sample260710-x4ztcsas2s
- SHA256 74dc350b4d3aa21c0e76f1a038af682fa176e44d883cd2fd2d10902bc9a7a35f
- MD5 c1d409a206062dfe53e83fe59a76628c
- SHA1 8786c16e4a7734370e8d6695a66555a54b84175e
- SHA512 a20b4b4b580af1db69e3037561b2bc1c43ffdfccc070701e82c184e7b9154709c9407cd7bd03ddc1b292fa4bcc88e8a3049cda7f3d80002b2205c660670575e0
- SSDEEP 98304:ik46WLrE1xofsqLc60LHFtXhIjSz5JnRymmw4InifWJ3E/7KQzrl:ik46WX9HEFtX6jSdJnRLaWJ3E/7x5
- TLSH T1D61633E24F527557C82322B02F262B27711FAED5D13423E3EBC2A545B926F8DF782851
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Harmless Asset Manager_3.7.0_x64-setup.exe
Resource
win11ltsc2024-20260709-en
17 signatures
30 seconds
Malware Config
Targets
-
- Target Harmless Asset Manager_3.7.0_x64-setup.exe
- Size 4.0MB
- SHA256 74dc350b4d3aa21c0e76f1a038af682fa176e44d883cd2fd2d10902bc9a7a35f
- MD5 c1d409a206062dfe53e83fe59a76628c
- SHA1 8786c16e4a7734370e8d6695a66555a54b84175e
- SHA512 a20b4b4b580af1db69e3037561b2bc1c43ffdfccc070701e82c184e7b9154709c9407cd7bd03ddc1b292fa4bcc88e8a3049cda7f3d80002b2205c660670575e0
- SSDEEP 98304:ik46WLrE1xofsqLc60LHFtXhIjSz5JnRymmw4InifWJ3E/7KQzrl:ik46WX9HEFtX6jSdJnRLaWJ3E/7x5
- TLSH T1D61633E24F527557C82322B02F262B27711FAED5D13423E3EBC2A545B926F8DF782851
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.