General
- Target simplewall-3.9-setup.exe
- Size 860KB
- Sample260805-sh512abh97
- SHA256 304af087d8e92aa85cf9d3c5480be53b8705d181b6bfadadb05c9f7e4179fabc
- MD5 a605a54276cffe159d1eaa6c56212ddd
- SHA1 3ad1f3a143ef02d23ae325c6b7fb427edaa16c84
- SHA512 c2ba120491f9794f57c5359907fc1a8e7bde8af7d2cfc31ce629d9d46c17e9e8460dd6bdccfea54da13ffd48e4d784c4db705b0f5671ab8641f6e18ce147b26d
- SSDEEP 12288:SlnpgzWOeSNL5EVkBYetzB5JT7nYSK7gIwti5HtVQrQdnh/WvvwmV1oydEjzw6T8:KnuzASr9B/t9c7Ebti2u03F+TkKaL
- TLSH T182152311B386C467C016093089F5D3B32A75B701972B3F67BBB87E5B6CB21D2E92E641
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
simplewall-3.9-setup.exe
Resource
win11ltsc2024-20260709-en
9 signatures
600 seconds
Malware Config
Targets
-
- Target simplewall-3.9-setup.exe
- Size 860KB
- SHA256 304af087d8e92aa85cf9d3c5480be53b8705d181b6bfadadb05c9f7e4179fabc
- MD5 a605a54276cffe159d1eaa6c56212ddd
- SHA1 3ad1f3a143ef02d23ae325c6b7fb427edaa16c84
- SHA512 c2ba120491f9794f57c5359907fc1a8e7bde8af7d2cfc31ce629d9d46c17e9e8460dd6bdccfea54da13ffd48e4d784c4db705b0f5671ab8641f6e18ce147b26d
- SSDEEP 12288:SlnpgzWOeSNL5EVkBYetzB5JT7nYSK7gIwti5HtVQrQdnh/WvvwmV1oydEjzw6T8:KnuzASr9B/t9c7Ebti2u03F+TkKaL
- TLSH T182152311B386C467C016093089F5D3B32A75B701972B3F67BBB87E5B6CB21D2E92E641
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.