General
- Target TwitchLinkSetup-3.5.5.exe
- Size 191.2MB
- Sample260723-blhw8sef94
- SHA256 ba1e8c74580e3516fa9253ddca1fae9a07623bedb25c7c5653117dc3f25abe05
- MD5 d68d5872d1a38467133919253b14252e
- SHA1 953e6cc24c7a35f0f9914c3fceac8b6a1e90017e
- SHA512 df22ea7dbd75907f443e4fb03097ed7bdeedfd6f1860eaa7891297d47054faae2958af4463bb0be09c5cc16d8a959373e977c993ac865aeeca49022c5b60ebab
- SSDEEP 3145728:OvPkcp2AuoSoZ2n5sy9HWeS3ZsW+y7J2MuGp7s/2ZDAIa4OXNZyFuaSL+Lmg6:CPkcp2AuonZ25sYtSpsW+G25leZDATHj
- TLSH T17AA8333BA647723DEC2A35723936E1310337AF01665399469AE8B84EEF741701D2F1DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
TwitchLinkSetup-3.5.5.exe
Resource
win11ltsc2024-20260709-en
29 signatures
600 seconds
Malware Config
Targets
-
- Target TwitchLinkSetup-3.5.5.exe
- Size 191.2MB
- SHA256 ba1e8c74580e3516fa9253ddca1fae9a07623bedb25c7c5653117dc3f25abe05
- MD5 d68d5872d1a38467133919253b14252e
- SHA1 953e6cc24c7a35f0f9914c3fceac8b6a1e90017e
- SHA512 df22ea7dbd75907f443e4fb03097ed7bdeedfd6f1860eaa7891297d47054faae2958af4463bb0be09c5cc16d8a959373e977c993ac865aeeca49022c5b60ebab
- SSDEEP 3145728:OvPkcp2AuoSoZ2n5sy9HWeS3ZsW+y7J2MuGp7s/2ZDAIa4OXNZyFuaSL+Lmg6:CPkcp2AuonZ25sYtSpsW+G25leZDATHj
- TLSH T17AA8333BA647723DEC2A35723936E1310337AF01665399469AE8B84EEF741701D2F1DA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1