General
- Target Pandoc.GUI_2.1.1_x64_en-US.msi
- Size 6.5MB
- Sample260724-atedcaysfs
- SHA256 560acaf8e13e3a398da2c760d85d91bbbf37058ed6cae2e77f78dd1c6d7ba146
- MD5 98c88ac29a516d18b08722e9a6159d7a
- SHA1 ad2d6b35b02d3388f7dfec786fdff27214d062e5
- SHA512 6a4069c8d8f7165d4ce5e719bac9e016cb142f9ab57cd97ecec06c2158ceece35bd9d823b8ec06c921b901b044a03b0d6a7d54d5b25a94ebf54e30bd64ce2771
- SSDEEP 196608:pH5L5GCtKvkR3q4DLL3mz5gCuW19MZR0Nr3zdTKQ:D5GCtiEjDHmz5gCunZRy7RTK
- TLSH T15466331BBF50D63BC8620C7A4476A3A0877CEC506B954C87359A772CC9F37C02996EE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Pandoc.GUI_2.1.1_x64_en-US.msi
Resource
win11-20260513-en
23 signatures
150 seconds
Malware Config
Targets
-
- Target Pandoc.GUI_2.1.1_x64_en-US.msi
- Size 6.5MB
- SHA256 560acaf8e13e3a398da2c760d85d91bbbf37058ed6cae2e77f78dd1c6d7ba146
- MD5 98c88ac29a516d18b08722e9a6159d7a
- SHA1 ad2d6b35b02d3388f7dfec786fdff27214d062e5
- SHA512 6a4069c8d8f7165d4ce5e719bac9e016cb142f9ab57cd97ecec06c2158ceece35bd9d823b8ec06c921b901b044a03b0d6a7d54d5b25a94ebf54e30bd64ce2771
- SSDEEP 196608:pH5L5GCtKvkR3q4DLL3mz5gCuW19MZR0Nr3zdTKQ:D5GCtiEjDHmz5gCunZRy7RTK
- TLSH T15466331BBF50D63BC8620C7A4476A3A0877CEC506B954C87359A772CC9F37C02996EE9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks whether UAC is enabled
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2PowerShell
1Windows Command Shell
1