General
- Target Mario_Kart_8_Deluxe_NSP_XCI_ROM_v3.0.5_D_Archive_win64_5340.zip
- Size 691.7MB
- Sample260727-zktjca11fz
- SHA256 6ad367a290f7145df34234dd972491f63ed17db748e7e0006aed368b796d22d2
- MD5 0e0ae4967f3ef77ca7fb683a461a95ed
- SHA1 10c49b3a6a7021b244e0f6c4bef7bce860200f2d
- SHA512 b0faffb2b13ea7d4b5a0eeabdf60c1d18a84061317df00449ab9447083ead271625f453b708cc473ecd1602fb2c55b65ffe53dbf0eea6c4342a9e566a976e5ba
- SSDEEP 393216:q7CF4GJTY45nO6QMFKLkIUgxOtssvLYvGYX0RBt5jO57CUlJimQJWJQgYgOOiSHl:oxZMFSxOJGX0vXihnPYz5SQH0TZZoM
- TLSH T11B793304CA2DE5D7FB9736B878F0D0979A3B507131CF9255F9A932F49D8A9006F2C90A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Setup.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
Setup.exe
Resource
win11ltsc2024-20260710-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target Setup.exe
- Size 102KB
- SHA256 7123e1514b939b165985560057fe3c761440a9fff9783a3b84e861fd2888d4ab
- MD5 0323998e0e85eca5fd90d9f8ecbbd6c2
- SHA1 56dc080f728d7a276495d6a4371670f9ea71519b
- SHA512 2b56c210d6c690cef89ca03563cec186576c50f6b1b60b287afd46a14cc5c9dfce31dd458066098951a79daf3b367fdb0787d3bdc74fbd8f69425877f263b0e5
- SSDEEP 3072:53Yj+8JlFCumUbyJlKP8HRvkduTK5Nrh2o9Dj0fmoQ:1Q+IFCumUGekHRvEuO3go9kfnQ
- TLSH T167A3F206BB1615BEE922803EEA970666D7B0FB6217514CC71211A2301FB7FC19E379E5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Indirect Command Execution
Adversaries may abuse utilities that allow for command execution to bypass security restrictions that limit the use of command-line interpreters.
-
Suspicious use of NtSetInformationThreadHideFromDebugger