General
- Target adguardVPNInstaller.exe
- Size 111KB
- Sample260815-snf9vsdm6x
- SHA256 fac72095a06474a8fb5a77dd72fd7a5b91e3184e1b0d4afa5f647e9fec656dba
- MD5 2a91107ef3d67bd845dfe1b2f88d1083
- SHA1 64e6a9c612c1e684d91ded0d97b43d698b99ecab
- SHA512 4b46b2411d607c91f6ef633fc9c0e9e24369397ceb5700b2df42204c46fa4a7b8d89341d5164dca2370094d1ab94d4971db20e9ac16e789a5e9ea25b33f0c504
- SSDEEP 1536:64GZnjfFGS6VW3RtfU3wxfHKMFHPGwFCVZUpbdXH+j0NJs7o7p2:64GZnrASj3/SQLFvGwFCZ+XH+IZU
- TLSH T171B3AF4AFD4350F1F91BD570968BFB3F8670E227841499ABFFCA4B09F5627A3640A205
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
adguardVPNInstaller.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
adguardVPNInstaller.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target adguardVPNInstaller.exe
- Size 111KB
- SHA256 fac72095a06474a8fb5a77dd72fd7a5b91e3184e1b0d4afa5f647e9fec656dba
- MD5 2a91107ef3d67bd845dfe1b2f88d1083
- SHA1 64e6a9c612c1e684d91ded0d97b43d698b99ecab
- SHA512 4b46b2411d607c91f6ef633fc9c0e9e24369397ceb5700b2df42204c46fa4a7b8d89341d5164dca2370094d1ab94d4971db20e9ac16e789a5e9ea25b33f0c504
- SSDEEP 1536:64GZnjfFGS6VW3RtfU3wxfHKMFHPGwFCVZUpbdXH+j0NJs7o7p2:64GZnrASj3/SQLFvGwFCZ+XH+IZU
- TLSH T171B3AF4AFD4350F1F91BD570968BFB3F8670E227841499ABFFCA4B09F5627A3640A205
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Downloads MZ/PE file
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1