General
- Target setup.exe
- Size 4.8MB
- Sample260806-ew6mtsdl41
- SHA256 516c9a3c0fa2194ce98f59bcee7465a28ad8533d3545628fd65e3bcf3c6319e3
- MD5 191221029f9c4e090e294b5a94a514cf
- SHA1 f4d7bf711e9cddefba8140d3a6cd0bb8e1671972
- SHA512 5206db9ec38e954db8d66a96f6d0f9689745874201d407c3a6dcb49a360b9affe7b050c61fa049f1994119959381be33b257f082a4636c7bb14cc6dff2811833
- SSDEEP 98304:sf7wCQInrje/CAVMJy1WGsF3y71V3bkIBAuhO8ggN:sfn6/VSlGC3yPRVjT
- TLSH T1B436330193C35836F46109395D52C5682E23FAB72AD461252EBCDB5F0AB92C77DBB3B0
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
setup.exe
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target setup.exe
- Size 4.8MB
- SHA256 516c9a3c0fa2194ce98f59bcee7465a28ad8533d3545628fd65e3bcf3c6319e3
- MD5 191221029f9c4e090e294b5a94a514cf
- SHA1 f4d7bf711e9cddefba8140d3a6cd0bb8e1671972
- SHA512 5206db9ec38e954db8d66a96f6d0f9689745874201d407c3a6dcb49a360b9affe7b050c61fa049f1994119959381be33b257f082a4636c7bb14cc6dff2811833
- SSDEEP 98304:sf7wCQInrje/CAVMJy1WGsF3y71V3bkIBAuhO8ggN:sfn6/VSlGC3yPRVjT
- TLSH T1B436330193C35836F46109395D52C5682E23FAB72AD461252EBCDB5F0AB92C77DBB3B0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Probable phishing domain