General
- Target network-helper-latest.msi
- Size 17.3MB
- Sample260804-bl91qaaf23
- SHA256 bc96354853b0f653e44ceaba2f068fc9fd6662af0058c4e68819dbadba0cfacb
- MD5 f36f6414ebf14e9fce44c1de7fa6e5d5
- SHA1 e0af0cf5820baa7548fb45eb1041a683c699f550
- SHA512 a28b776ac057a1351b57e5152c1e15ce7aed3bfeebb75e0f48a4c790ecc0eb76380bc14423f8346d50616f6a156c0a8b2e1e9ddaeb40d0f29fd67f14cb1b5ca7
- SSDEEP 196608:3qUAY7Ij+384/FRAeNkLaXeF+4uOStpEnjHpNEmLcqT+5PED2u0JFW4i0NUB:3QY7IBUR/54kQjHpNEmF0EGJfif
- TLSH T17E07AE33F8541DE5D1BCA2328DAF8602BA717C150B21ABD71E50FAB66E767E06DB5300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
network-helper-latest.msi
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
network-helper-latest.msi
Resource
win11ltsc2024-20260709-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target network-helper-latest.msi
- Size 17.3MB
- SHA256 bc96354853b0f653e44ceaba2f068fc9fd6662af0058c4e68819dbadba0cfacb
- MD5 f36f6414ebf14e9fce44c1de7fa6e5d5
- SHA1 e0af0cf5820baa7548fb45eb1041a683c699f550
- SHA512 a28b776ac057a1351b57e5152c1e15ce7aed3bfeebb75e0f48a4c790ecc0eb76380bc14423f8346d50616f6a156c0a8b2e1e9ddaeb40d0f29fd67f14cb1b5ca7
- SSDEEP 196608:3qUAY7Ij+384/FRAeNkLaXeF+4uOStpEnjHpNEmLcqT+5PED2u0JFW4i0NUB:3QY7IBUR/54kQjHpNEmF0EGJfif
- TLSH T17E07AE33F8541DE5D1BCA2328DAF8602BA717C150B21ABD71E50FAB66E767E06DB5300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Manipulates Digital Signatures
Attackers can apply techniques such as changing the registry keys of authenticode & Cryptography to make their binary seem validly signed.
-
Executes dropped EXE
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.