General
- Target TD_Endpoint.msi
- Size 62.3MB
- Sample260717-ges2hsbx8m
- SHA256 b1a0e4a06478f5cfce103242373ecae31e7b4f3abd00d3265dc7c9b1061b144b
- MD5 cb96950270df6416253ea3a59c62571c
- SHA1 22d8a2df950fdb37100fba16e1f82d483679e4df
- SHA512 1d8c11269912b32008948d38d319f57bf1bacdcb74738ea7af2f5f0f72ecc738c6f017479a5d769250b40eeb2a77fd3b5b063f5cc6fde988bf390ab12885994e
- SSDEEP 1572864:sEnOLmlbQdfv85WIu9Yl295V4+nlhl+CksDaJX+78gi5:sEDlbQdnwZuql29n4sjlzlCXw7m
- TLSH T1C6E72213FCA510E9C0AE91358A3A9667BF317C590B2163D72B90F6283EB3BD06E75354
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
TD_Endpoint.msi
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
TD_Endpoint.msi
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target TD_Endpoint.msi
- Size 62.3MB
- SHA256 b1a0e4a06478f5cfce103242373ecae31e7b4f3abd00d3265dc7c9b1061b144b
- MD5 cb96950270df6416253ea3a59c62571c
- SHA1 22d8a2df950fdb37100fba16e1f82d483679e4df
- SHA512 1d8c11269912b32008948d38d319f57bf1bacdcb74738ea7af2f5f0f72ecc738c6f017479a5d769250b40eeb2a77fd3b5b063f5cc6fde988bf390ab12885994e
- SSDEEP 1572864:sEnOLmlbQdfv85WIu9Yl295V4+nlhl+CksDaJX+78gi5:sEDlbQdnwZuql29n4sjlzlCXw7m
- TLSH T1C6E72213FCA510E9C0AE91358A3A9667BF317C590B2163D72B90F6283EB3BD06E75354
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1System Binary Proxy Execution
1Msiexec
1