General
- Target Transwiz.msi
- Size 2.8MB
- Sample260723-ppf4psyena
- SHA256 511c2c0908883bc9d05295e5145b767f2633461c93a31d1cb8d765ee09cdd801
- MD5 cf1dd0006c422c2c85c46a6fe4506406
- SHA1 da48ec07cea7407b6b2d38dbb54d2cd472bd7563
- SHA512 9145083d1253ad96d67156015e8e567851178b80e0c8c3f6090a30e80846e83cc96dfa4ff8fafe0fe28190ec9a0625821607ded78925baeb35fe77b7585be3c8
- SSDEEP 49152:fx3AY5aeGDcQ8KmLVR97uAHSvVPcAANEoW7SAmEzkGl7KMGzu7dhlwe50Qe2:GYTGDP8KmHHSVAvW7SAhxQMG67Zwe6r
- TLSH T106D5F1217286C53BD56E05703A2EEA5A513ABF700BB1C4E7A3D8EA3E19735C15331F62
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Transwiz.msi
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
Transwiz.msi
Resource
win11ltsc2024-20260709-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target Transwiz.msi
- Size 2.8MB
- SHA256 511c2c0908883bc9d05295e5145b767f2633461c93a31d1cb8d765ee09cdd801
- MD5 cf1dd0006c422c2c85c46a6fe4506406
- SHA1 da48ec07cea7407b6b2d38dbb54d2cd472bd7563
- SHA512 9145083d1253ad96d67156015e8e567851178b80e0c8c3f6090a30e80846e83cc96dfa4ff8fafe0fe28190ec9a0625821607ded78925baeb35fe77b7585be3c8
- SSDEEP 49152:fx3AY5aeGDcQ8KmLVR97uAHSvVPcAANEoW7SAmEzkGl7KMGzu7dhlwe50Qe2:GYTGDP8KmHHSVAvW7SAhxQMG67Zwe6r
- TLSH T106D5F1217286C53BD56E05703A2EEA5A513ABF700BB1C4E7A3D8EA3E19735C15331F62
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.