General
- Target XyronTweaks setup.msi
- Size 16.4MB
- Sample260808-xtp66scm6z
- SHA256 c0c2729986a22ae96680b2342f0be5846f799c2563255d22d29e333520a1801e
- MD5 2be826427e08f6250ca9cf0ff8cd8550
- SHA1 701cfcda1f1acf90346734425b26ed7c0f1c90ee
- SHA512 3eebf2b0043d665602d2d5377516099d6a5484f9d357bdaf7efa478b2b6424d00832f2b39dca680d9168c2c59cdfa369d71b05524f17cbfed5d77c8db28dd94b
- SSDEEP 196608:K8nPJtAMjbo5ZQJaxOXqIwZORzoI7mWlyi2G7H773/OGExsTGQPy7x5:K8PJtAMj8xO5r6Wlyi28brMarPy1
- TLSH T128071C981C12887BFE60D3376076573985AA2C458ED207763AED3D7437B126E8E532F2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
XyronTweaks setup.msi
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
XyronTweaks setup.msi
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target XyronTweaks setup.msi
- Size 16.4MB
- SHA256 c0c2729986a22ae96680b2342f0be5846f799c2563255d22d29e333520a1801e
- MD5 2be826427e08f6250ca9cf0ff8cd8550
- SHA1 701cfcda1f1acf90346734425b26ed7c0f1c90ee
- SHA512 3eebf2b0043d665602d2d5377516099d6a5484f9d357bdaf7efa478b2b6424d00832f2b39dca680d9168c2c59cdfa369d71b05524f17cbfed5d77c8db28dd94b
- SSDEEP 196608:K8nPJtAMjbo5ZQJaxOXqIwZORzoI7mWlyi2G7H773/OGExsTGQPy7x5:K8PJtAMj8xO5r6Wlyi28brMarPy1
- TLSH T128071C981C12887BFE60D3376076573985AA2C458ED207763AED3D7437B126E8E532F2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Suspicious use of NtSetInformationThreadHideFromDebugger