General
- Target LTspice64.msi
- Size 170.0MB
- Sample260805-aeeesstdlb
- SHA256 485dabd2d7d8293de733a399719f6538efda4a54b48b181a14e07271186984d3
- MD5 f32c4fc150b667cb1d3fddff32d15c28
- SHA1 8dfdea53c11c73f9d8987a71faea7ac01ff734fe
- SHA512 40a0f81547da1012d62567deefc323fe9756004c8b5f58661ae56436d08e58e50cc09d9dfd47a184899d47171e74ebd1dd6645fb57635263b3b21c6d1760e661
- SSDEEP 3145728:Cbn1tGF6y1OWLqLbXtUuUCPdG1hTBbRv8+vnh8pWuOMWiNvdRE:Cb1tGFDdLYuuUCVGTnv8+vGpSE7
- TLSH T1D288F101B3FA4548F2FF1A717EBA5925947ABD520B30C0EF5254A60E1B32BC16BB1763
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
LTspice64.msi
Resource
win11-20260513-en
30 signatures
900 seconds
Malware Config
Targets
-
- Target LTspice64.msi
- Size 170.0MB
- SHA256 485dabd2d7d8293de733a399719f6538efda4a54b48b181a14e07271186984d3
- MD5 f32c4fc150b667cb1d3fddff32d15c28
- SHA1 8dfdea53c11c73f9d8987a71faea7ac01ff734fe
- SHA512 40a0f81547da1012d62567deefc323fe9756004c8b5f58661ae56436d08e58e50cc09d9dfd47a184899d47171e74ebd1dd6645fb57635263b3b21c6d1760e661
- SSDEEP 3145728:Cbn1tGF6y1OWLqLbXtUuUCPdG1hTBbRv8+vnh8pWuOMWiNvdRE:Cb1tGFDdLYuuUCVGTnv8+vGpSE7
- TLSH T1D288F101B3FA4548F2FF1A717EBA5925947ABD520B30C0EF5254A60E1B32BC16BB1763
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Loads dropped DLL
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Active Setup
1Event Triggered Execution
1Installer Packages
1Privilege Escalation
Boot or Logon Autostart Execution
1Active Setup
1Event Triggered Execution
1Installer Packages
1