General
- Target MathSys26
- Size 11.2MB
- Sample260805-sxtasacb26
- SHA256 be37a7544b7b155c47510fe44b6f50d922a3154dfa4ee654a955025ed447b54c
- MD5 916c7e43c3a3c5cfb497739ada9db3e5
- SHA1 1785d18e206d89a975db7aedd3cdd7fadc6cc3c4
- SHA512 4aa89d65e3290004e829d5fbdd54a4c3552f5bc41fbad2c86692253b7f6e727cf33c56d875f6ca29352c53e854001183bf8ef549d46904fc630efff04be68e80
- SSDEEP 196608:2jsFNpB1OANUmJSASP8ejWbIGsQLyM64AoTpTKPeIk680yRT7885WfV65bTCIyfD:2AFNpnOKSASJWbIImTgZKPw6KR/N5WtT
- TLSH T153C6331261B88675C6FE0433492BE9611A7CFF3C1BA1C50DD391369DAF7188027B7B6A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
MathSys26.msi
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
MathSys26.msi
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target MathSys26
- Size 11.2MB
- SHA256 be37a7544b7b155c47510fe44b6f50d922a3154dfa4ee654a955025ed447b54c
- MD5 916c7e43c3a3c5cfb497739ada9db3e5
- SHA1 1785d18e206d89a975db7aedd3cdd7fadc6cc3c4
- SHA512 4aa89d65e3290004e829d5fbdd54a4c3552f5bc41fbad2c86692253b7f6e727cf33c56d875f6ca29352c53e854001183bf8ef549d46904fc630efff04be68e80
- SSDEEP 196608:2jsFNpB1OANUmJSASP8ejWbIGsQLyM64AoTpTKPeIk680yRT7885WfV65bTCIyfD:2AFNpnOKSASJWbIImTgZKPw6KR/N5WtT
- TLSH T153C6331261B88675C6FE0433492BE9611A7CFF3C1BA1C50DD391369DAF7188027B7B6A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.