General
- Target HeroSidekickSetup.msi
- Size 145.3MB
- Sample260812-l6jdlsem8w
- SHA256 799e448a8bb68135f149cf0a9372069c435176077cc83dd43bcf11e65798a70c
- MD5 95ac99ce881d51d398a5b35c03ae0ca7
- SHA1 a2e2d5f91dd42dafcc7d41477ce605126bf80753
- SHA512 c9e1569351cff76b697a34d0bf36fd9b672cef8bf5ceb44985a176e51683abac8ef5b9b0c13f65b8fece6bfc6ecb2f229265248b32e3d5ba7925d1bdef6c560b
- SSDEEP 3145728:J2aNnJKhDGzX2yiEXbNl5j8exEyKsLUfRkDLJg7DpX2:JvJAGzm30NlN8eOsLsuMDpG
- TLSH T1D67833EC0F66BD1CF1919C3BC406A109264368726191DE1F52B4FFE83A769D1FE6C826
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
HeroSidekickSetup.msi
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target HeroSidekickSetup.msi
- Size 145.3MB
- SHA256 799e448a8bb68135f149cf0a9372069c435176077cc83dd43bcf11e65798a70c
- MD5 95ac99ce881d51d398a5b35c03ae0ca7
- SHA1 a2e2d5f91dd42dafcc7d41477ce605126bf80753
- SHA512 c9e1569351cff76b697a34d0bf36fd9b672cef8bf5ceb44985a176e51683abac8ef5b9b0c13f65b8fece6bfc6ecb2f229265248b32e3d5ba7925d1bdef6c560b
- SSDEEP 3145728:J2aNnJKhDGzX2yiEXbNl5j8exEyKsLUfRkDLJg7DpX2:JvJAGzm30NlN8eOsLsuMDpG
- TLSH T1D67833EC0F66BD1CF1919C3BC406A109264368726191DE1F52B4FFE83A769D1FE6C826
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Installer Packages
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Installer Packages
1