General
- Target Foundry_VTT-1.zip
- Size 197.7MB
- Sample260813-bmpfeayfmb
- SHA256 a9ce5bd9506d982656a51cc6d00271fa567bb6668fa9bb27c015fcc2c403eb60
- MD5 48189c784c4d18aec3d51fb100ae38cb
- SHA1 199e9dc3fedee8a64b4576ec52322aba58f39dbf
- SHA512 184c230b669a6caed7711e846f1a8ba634b17e80c00243fe04e7770a7e567c26b98733aada233ae807c6f9310f1bcf358207d0d7bdb863fb64f65f0482159970
- SSDEEP 3145728:0aIEEYCI36JVhYEki/+EPiAzir+KbeD8hIui0JPHSPk2b8yw9BIkt6/XfHexnwPj:0Axz36/ki/+Exo+QwuDikA8udpyoSQ
- TLSH T1ABA83363AA227498E75022E3BF680F27959BD4DA1095DD37F7B12FF0416D3CA788246C
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Foundry_VTT-1.bin
Resource
win11ltsc2024-20260709-en
4 signatures
300 seconds
Malware Config
Targets
-
- Target Foundry_VTT-1.bin
- Size 195.5MB
- SHA256 3beda3633ead519bf532c5774a7af9e804a22e07863f9b3a23379eb4976cca52
- MD5 008822cb3d130f658fd689fe8bb47fac
- SHA1 4dbc99c80a8976de8fba93f49a9f558d56fb1165
- SHA512 e5b0f8ee9199d86e96501c9b1f969324d7e8097a49658d42105d93f704a14c654fdd94f9a2f786072bf70de4756888f959ec678edeadd924f17e26ac55c38341
- SSDEEP 3145728:Gu0EE4Cy/IXthIYk4rCU3Kghm5eWDujMfSeIreDxmHqWpAFOW/StS8WWWNEWRAnm:G2Z7/IBk4rCUh8ek4emFqCtRHWKBU
- TLSH T128A833A7AB2B20A0DF641A32FBF81715709799F86185DE3318E22CF110AE1F53D5B65C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Foundry_VTT.exe
- Size 3.6MB
- SHA256 beb3daa974a4ca079a3a3bd2c9f34e98979a144372ddde3e2b1c4a542a06856e
- MD5 b8ef5add446d337ee02c6da59402e98c
- SHA1 852b9bd48710d71a74937425ed0c163fefde0067
- SHA512 1917856c9d20b20f796014b225c40b386405b7b76a862c7ef46bed7a5fcdf5c1246806d55f2d8b73682da996e14f6fd36b422b218691259dea295821880a5ef6
- SSDEEP 49152:mDXrxnBT/S+uWdbEpCqvrPjvPunt8kqRib4tjYl1POS0pXrF:mDbxd/STca6tyibeEl1sF
- TLSH T19C06F2929D799239D75CC23394E5F90A332E7EC093E9C662E1AB044ABD351350B3BDB1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.