General
- Target CoreVPN-Setup-1.0.21.msi
- Size 21.5MB
- Sample260803-wv54cade73
- SHA256 14d47d7d079f4c1eaaf7d9c7849a0fe7453922fe28ce224191b3678c2a6d4810
- MD5 447da325e8fa77100af0920b91b79008
- SHA1 9648a085a26a9dd6fd5b50f88c7835e1d4205d23
- SHA512 8c9f15a06486cc5402f3e058f0a01d4414b8bf8d6c14d2afd1c87179662854e5d43ecb7da0dcc76486eb2eff8f10dcb60dd953cd421ec7f42324bc2c0ff3929c
- SSDEEP 393216:SvyhMk35uKOMqRDq2BHRpDvcO75+bF0R8gJv9e6UkRS5IBVtH/7:QyhMkROldq8H/Lc0kGbJvbU8Sevx
- TLSH T15037338454B12ED9D38055BDF8E2B274B22E4F2D5B2E4E491A0BBB20117355F73E2E27
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
CoreVPN-Setup-1.0.21.msi
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
CoreVPN-Setup-1.0.21.msi
Resource
win11ltsc2024-20260709-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target CoreVPN-Setup-1.0.21.msi
- Size 21.5MB
- SHA256 14d47d7d079f4c1eaaf7d9c7849a0fe7453922fe28ce224191b3678c2a6d4810
- MD5 447da325e8fa77100af0920b91b79008
- SHA1 9648a085a26a9dd6fd5b50f88c7835e1d4205d23
- SHA512 8c9f15a06486cc5402f3e058f0a01d4414b8bf8d6c14d2afd1c87179662854e5d43ecb7da0dcc76486eb2eff8f10dcb60dd953cd421ec7f42324bc2c0ff3929c
- SSDEEP 393216:SvyhMk35uKOMqRDq2BHRpDvcO75+bF0R8gJv9e6UkRS5IBVtH/7:QyhMkROldq8H/Lc0kGbJvbU8Sevx
- TLSH T15037338454B12ED9D38055BDF8E2B274B22E4F2D5B2E4E491A0BBB20117355F73E2E27
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Modifies file permissions
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.