General
- Target EmuDeck-Setup-2.5.0.exe
- Size 81.5MB
- Sample260810-pdz3fas1hw
- SHA256 5dfb2101705cc8f8d65784dfe674cce875ff39cc7b0ad7feb10fd341de0720a1
- MD5 a588526a10212d9c3e8fde0d207e0fc0
- SHA1 a81514135d821d7c5c011b5fbdb9901414aac617
- SHA512 a43dc0a35d6ea9820d64a83b6634c9a26761f2c49a97b3a4a312c621cf5b794e25b4f16da0e9d9c88af7b9de2b5dbd8fb32c5508540e1691e206d25b27c08b0e
- SSDEEP 1572864:Kvu+Ov1O05XLNr18U7L53Mp4csvkEtRAQ8n/p9FbnIIQvQLu03lAxLsewTczzkD:Kvu+EFLNRh53MC8yeRvIzYu2
- TLSH T176183371C6EE8582D983ADFF8829628F943E0F107D466D0583781191DECF9C67E6A3B4
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
EmuDeck-Setup-2.5.0.exe
Resource
win11-20260513-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target EmuDeck-Setup-2.5.0.exe
- Size 81.5MB
- SHA256 5dfb2101705cc8f8d65784dfe674cce875ff39cc7b0ad7feb10fd341de0720a1
- MD5 a588526a10212d9c3e8fde0d207e0fc0
- SHA1 a81514135d821d7c5c011b5fbdb9901414aac617
- SHA512 a43dc0a35d6ea9820d64a83b6634c9a26761f2c49a97b3a4a312c621cf5b794e25b4f16da0e9d9c88af7b9de2b5dbd8fb32c5508540e1691e206d25b27c08b0e
- SSDEEP 1572864:Kvu+Ov1O05XLNr18U7L53Mp4csvkEtRAQ8n/p9FbnIIQvQLu03lAxLsewTczzkD:Kvu+EFLNRh53MC8yeRvIzYu2
- TLSH T176183371C6EE8582D983ADFF8829628F943E0F107D466D0583781191DECF9C67E6A3B4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2PowerShell
1Windows Command Shell
1Defense Evasion
Hide Artifacts
1Ignore Process Interrupts
1Modify Registry
1Subvert Trust Controls
2Install Root Certificate
2