General
- Target Apple Setup.exe
- Size 384KB
- Sample260716-3ms75sbv51
- SHA256 cd0c1dbe989bf124b4ab39d8cf4f5468a3ee9ade9cc180886ae4058cee943517
- MD5 1ad8194b1276ae7ff8f0fe982e02ba7d
- SHA1 c604cbef58c5e63873111faf2b77e09e7299c80b
- SHA512 08192b82873a6c04549ba46bc71dd375c6debd99a1cc1a2d9c798bbdd3078c05d6b76f125cdfa744cfc9408c703bd3a79568c86189053347c6095afa9c6a4928
- SSDEEP 6144:aVjZVYSL1bbqSY0DbHZSk3HcJCSCtUnkS38tQQ9go0S0c:2FVHZSOcJCtUk2h
- TLSH T16C849E1AFAA500F5E1A7C138C9A34502FB727CDE47619BDF13A849961F236E09E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Apple Setup.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
Apple Setup.exe
Resource
win10ltsc2021-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral3
Sample
Apple Setup.exe
Resource
win11-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral4
Sample
Apple Setup.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target Apple Setup.exe
- Size 384KB
- SHA256 cd0c1dbe989bf124b4ab39d8cf4f5468a3ee9ade9cc180886ae4058cee943517
- MD5 1ad8194b1276ae7ff8f0fe982e02ba7d
- SHA1 c604cbef58c5e63873111faf2b77e09e7299c80b
- SHA512 08192b82873a6c04549ba46bc71dd375c6debd99a1cc1a2d9c798bbdd3078c05d6b76f125cdfa744cfc9408c703bd3a79568c86189053347c6095afa9c6a4928
- SSDEEP 6144:aVjZVYSL1bbqSY0DbHZSk3HcJCSCtUnkS38tQQ9go0S0c:2FVHZSOcJCtUk2h
- TLSH T16C849E1AFAA500F5E1A7C138C9A34502FB727CDE47619BDF13A849961F236E09E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Server Software Component: Terminal Services DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Time Providers
1Server Software Component
1Terminal Services DLL
1