General
- Target ledger-live-desktop-2.70.0-win-x64-setup.exe
- Size 183KB
- Sample260717-jrwdhsat31
- SHA256 26995b5c116da8bc55341e3b16ce6efaf263058e2938b3e416507ffd1b5ab103
- MD5 ab5c9e0e1c112d13a894bd2811b786cd
- SHA1 09c65f3e0418e8c150bc88a266427effb1a1f07d
- SHA512 f7c4f6c9e379b683ea0674a9f08df7f90d010c37e614d3f614ef9a1ea4d226033dd3e7ca530962edc23957102cad689eb4cc7020f29575ad4fefacbb496b0968
- SSDEEP 3072:5aZxxKy1v6wvOa5ORinNfIgLQr0IkMipDZnuIUzK:uLn1v6wvOaKinNQrpeln5UzK
- TLSH T15D040903D56720BEC069C6B4868BE632FA73BC4C1374564B17D0DEA73B61AB17A3D606
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
ledger-live-desktop-2.70.0-win-x64-setup.exe
Resource
win11-20260513-en
11 signatures
60 seconds
Malware Config
Targets
-
- Target ledger-live-desktop-2.70.0-win-x64-setup.exe
- Size 183KB
- SHA256 26995b5c116da8bc55341e3b16ce6efaf263058e2938b3e416507ffd1b5ab103
- MD5 ab5c9e0e1c112d13a894bd2811b786cd
- SHA1 09c65f3e0418e8c150bc88a266427effb1a1f07d
- SHA512 f7c4f6c9e379b683ea0674a9f08df7f90d010c37e614d3f614ef9a1ea4d226033dd3e7ca530962edc23957102cad689eb4cc7020f29575ad4fefacbb496b0968
- SSDEEP 3072:5aZxxKy1v6wvOa5ORinNfIgLQr0IkMipDZnuIUzK:uLn1v6wvOaKinNQrpeln5UzK
- TLSH T15D040903D56720BEC069C6B4868BE632FA73BC4C1374564B17D0DEA73B61AB17A3D606
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Havoc payload
-
Windows security bypass
-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Executes dropped EXE
-
Windows security modification
-
Adds Run key to start application