General
- Target SherwoodInstall.msi
- Size 12.5MB
- Sample260815-c3k9csdp4t
- SHA256 0d3d82b781eec7985f6dfffc02712c9326dd084b730bbe9d78052e4b09983fa4
- MD5 6d228cbd4bc9a57dd1f9e8fb14b48ffa
- SHA1 88bf5da4918678542b64fc55f0c2241b0a5117ed
- SHA512 b36d104abb896e4ff37ec5ae57417b81414f1cc2b8b2b640b732f1b954856cf6c1f78ad7f441ffa3f6dc154b3aeea110882c785ee1a9c4ca5f8dc4ab0a433061
- SSDEEP 196608:nSEuIuu7KoCaR+6PoJCj6ZHnsBczDNJYSxrFTufCJTZElT3CTFMZgqBTGTntHEIc:nSEZGohPvj6xsBihTufSicF2BIFA+i
- TLSH T131D63321B2DBC537C6AA05B1367F861902203D614B73D4EB33DC395E2F725D267B2A26
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
SherwoodInstall.msi
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
SherwoodInstall.msi
Resource
win11ltsc2024-20260709-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target SherwoodInstall.msi
- Size 12.5MB
- SHA256 0d3d82b781eec7985f6dfffc02712c9326dd084b730bbe9d78052e4b09983fa4
- MD5 6d228cbd4bc9a57dd1f9e8fb14b48ffa
- SHA1 88bf5da4918678542b64fc55f0c2241b0a5117ed
- SHA512 b36d104abb896e4ff37ec5ae57417b81414f1cc2b8b2b640b732f1b954856cf6c1f78ad7f441ffa3f6dc154b3aeea110882c785ee1a9c4ca5f8dc4ab0a433061
- SSDEEP 196608:nSEuIuu7KoCaR+6PoJCj6ZHnsBczDNJYSxrFTufCJTZElT3CTFMZgqBTGTntHEIc:nSEZGohPvj6xsBihTufSicF2BIFA+i
- TLSH T131D63321B2DBC537C6AA05B1367F861902203D614B73D4EB33DC395E2F725D267B2A26
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Loads dropped DLL
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.