General
- Target WareStoreSetup.exe
- Size 25.5MB
- Sample260809-1pe27aej6z
- SHA256 d924e25e6cac451372062f23d401a7f7e5118e61936d49e0890ca6955fd20586
- MD5 ba778dbfb516e2d43c5542069c79d21b
- SHA1 eb66a41aedf328db98f091ce05a75815b1fe0cf2
- SHA512 b7e34ceb6323038e9048e2731f147c1a95cf1b4dd27f6ccf8542ad9e40e76b837ff9e5322dc3b0ad46b7532cdb6a55633e1860d827c3b4d7fe4c9ddc15cc1f2b
- SSDEEP 393216:VqtlX+5H+78fwdN6FITzOoKC1UXP86VZwFzFJ6iwlVvxhoM9qLVAlresHmhR0/cQ:0tln7mwd0cx91qLVCBFBwzDdxLGxQ
- TLSH T1CF47333BB17AA26DE07A0E756E339113143BA9A166D68C05DEE48C4CDB1D37C1B3E643
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
WareStoreSetup.exe
Resource
win10ltsc2021-20260513-en
21 signatures
300 seconds
Malware Config
Targets
-
- Target WareStoreSetup.exe
- Size 25.5MB
- SHA256 d924e25e6cac451372062f23d401a7f7e5118e61936d49e0890ca6955fd20586
- MD5 ba778dbfb516e2d43c5542069c79d21b
- SHA1 eb66a41aedf328db98f091ce05a75815b1fe0cf2
- SHA512 b7e34ceb6323038e9048e2731f147c1a95cf1b4dd27f6ccf8542ad9e40e76b837ff9e5322dc3b0ad46b7532cdb6a55633e1860d827c3b4d7fe4c9ddc15cc1f2b
- SSDEEP 393216:VqtlX+5H+78fwdN6FITzOoKC1UXP86VZwFzFJ6iwlVvxhoM9qLVAlresHmhR0/cQ:0tln7mwd0cx91qLVCBFBwzDdxLGxQ
- TLSH T1CF47333BB17AA26DE07A0E756E339113143BA9A166D68C05DEE48C4CDB1D37C1B3E643
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.