General
- Target XyronMacro_Setup.msi
- Size 1.5MB
- Sample260808-yetfqatdlc
- SHA256 0799161d076fe387cfb748d3529a3a4c0eacc23463337b6dae360f17a4ab214b
- MD5 e1fd68d6418a099d4a9709d33a58d850
- SHA1 16b59bbd3f953f73b02b607c5efc06f1725aae7c
- SHA512 aad2118033f265ff8225f46ab4b4b53a0ab91672f072f33de01229bd75b43a3ff8c5a455be9777e7b56ae0154eeb0cb1a39a5ca8fd071dfe2a08ad703366a0ac
- SSDEEP 24576:M5A121jsR6anvHMUOjiTFUUj4dpOoIna/Z66FGCW/F9UUP4uOrh5EIiQ:M5AsCR5PMUOjUFUUj4d4cZ5FGCW99UUa
- TLSH T12F75121F7E505972C8790EF6443BC7B11B2CAC408F91A94B368A714ACFFA1E05E25AD7
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
XyronMacro_Setup.msi
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
XyronMacro_Setup.msi
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target XyronMacro_Setup.msi
- Size 1.5MB
- SHA256 0799161d076fe387cfb748d3529a3a4c0eacc23463337b6dae360f17a4ab214b
- MD5 e1fd68d6418a099d4a9709d33a58d850
- SHA1 16b59bbd3f953f73b02b607c5efc06f1725aae7c
- SHA512 aad2118033f265ff8225f46ab4b4b53a0ab91672f072f33de01229bd75b43a3ff8c5a455be9777e7b56ae0154eeb0cb1a39a5ca8fd071dfe2a08ad703366a0ac
- SSDEEP 24576:M5A121jsR6anvHMUOjiTFUUj4dpOoIna/Z66FGCW/F9UUP4uOrh5EIiQ:M5AsCR5PMUOjUFUUj4d4cZ5FGCW99UUa
- TLSH T12F75121F7E505972C8790EF6443BC7B11B2CAC408F91A94B368A714ACFFA1E05E25AD7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.