General
- Target WeLink_setup.exe
- Size 302.5MB
- Sample260801-nd1tastdle
- SHA256 8c702e5dd83fbb1e8c2ee6564be41212abc4dd3f2600fccba993b5a3856cf217
- MD5 c8a2a3a87b2ddebdcc8d41d2b595717b
- SHA1 9935f0e00f6f5cb3f8210479105248296f3b2564
- SHA512 1fd44b41edfd611daf2ea78e48637a013b399a9e093645305716eb34a86ede0bd045087f8dbd7fc6d9469720b991089eda76e8791a5d7d372900ac97b6d5648b
- SSDEEP 6291456:wGBKYuFEAA1keo3V8BkuRhzbxphuSpyutpug6/NI4s:T4SAA1keoODRhzbxpEwykAh
- TLSH T18FE833517D109136E5A300B38DFE6E7D806CA9511B5421CB93C92EBEAB27EE37E32417
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
WeLink_setup.exe
Resource
win11ltsc2024-20260709-en
20 signatures
900 seconds
Malware Config
Targets
-
- Target WeLink_setup.exe
- Size 302.5MB
- SHA256 8c702e5dd83fbb1e8c2ee6564be41212abc4dd3f2600fccba993b5a3856cf217
- MD5 c8a2a3a87b2ddebdcc8d41d2b595717b
- SHA1 9935f0e00f6f5cb3f8210479105248296f3b2564
- SHA512 1fd44b41edfd611daf2ea78e48637a013b399a9e093645305716eb34a86ede0bd045087f8dbd7fc6d9469720b991089eda76e8791a5d7d372900ac97b6d5648b
- SSDEEP 6291456:wGBKYuFEAA1keo3V8BkuRhzbxphuSpyutpug6/NI4s:T4SAA1keoODRhzbxpEwykAh
- TLSH T18FE833517D109136E5A300B38DFE6E7D806CA9511B5421CB93C92EBEAB27EE37E32417
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.