Overview
overview
7Static
static
3Installer/Setup.exe
windows10-2004-x64
7Installer/Setup.exe
windows11-ltsc_2024-x64
7Installer/...64.exe
windows10-2004-x64
6Installer/...64.exe
windows11-ltsc_2024-x64
6Installer/...64.exe
windows10-2004-x64
4Installer/...64.exe
windows11-ltsc_2024-x64
4Installer/...64.exe
windows10-2004-x64
6Installer/...64.exe
windows11-ltsc_2024-x64
6Installer/...64.exe
windows10-2004-x64
4Installer/...64.exe
windows11-ltsc_2024-x64
4Installer/...64.exe
windows10-2004-x64
4Installer/...64.exe
windows11-ltsc_2024-x64
4General
- Target Installer.zip
- Size 357.9MB
- Sample260815-svs71adn3y
- SHA256 685792e9c018bf5117c86624c697e99805744c726ba51bf8a54afb9e068016ba
- MD5 0dd78e9ffc92732a8d5908ecd58ae842
- SHA1 6609a2e34f758df8a3a432c55ee7018f3481e616
- SHA512 4ce6cb217af74a378892a1e471f25cb5a044c7d5de3f04eabc059ad3bf7fd0df93ad0259697cdfb21a50553f1d88ba25e374785546a818ca2afe60b310b19d04
- SSDEEP 6291456:eCdjQj1Z8zu//yz4NBl+hzgfaNzR5+G8l7jqJkoEomxJzCH6A+U4o2R4Rqo48cO:eCmwQzl+qfaNz+rXkD+Jz+6A+UlgO
- TLSH T1FB0933B7924CDFEAE2422872C4797E0D47883012A5AF5467D75CCBB14B97BC325BAC84
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Installer/Setup.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Installer/Setup.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
Installer/utils/HidHide_1.5.230_x64.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Installer/utils/HidHide_1.5.230_x64.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
Installer/utils/VC_redist.x64.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
Installer/utils/VC_redist.x64.exe
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral7
Sample
Installer/utils/ViGEmBus_1.22.0_x64_x86_arm64.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
Installer/utils/ViGEmBus_1.22.0_x64_x86_arm64.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
Installer/utils/dotnet-sdk-9.0.301-win-x64.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
Installer/utils/dotnet-sdk-9.0.301-win-x64.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
Installer/utils/windowsdesktop-runtime-8.0.3-win-x64.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
Installer/utils/windowsdesktop-runtime-8.0.3-win-x64.exe
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target Installer/Setup.exe
- Size 128.2MB
- SHA256 9e25e843112fd3ea66778c951880a57d523a96311af3e9dc7449ac4707b86b16
- MD5 6c6bbf0774af7a1f0d827f6a4d891279
- SHA1 f27b91be3a510c805fec19dc4d140029c4780616
- SHA512 2780e45cffd4d5e2ea055b747751ebd0d61025e08a88f02f3f7df2aa2d96318d0c21d0d673d900b5418b0ea563d882d3bb6c7e39f804e0543d4befc0c4b186ab
- SSDEEP 786432:0bAJS0EvC8Tz/rNSBwRvJ4Rp4+asz0SCfwOsHZ4vxXAE8mYEOb:0bAc0Evlvv6eKif4MPYLb
- TLSH T13658AE14B3E80A15E67F827DCA738112EAB1B8531321C1CF1499DA4D2FA3BD19A76377
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
- Target Installer/utils/HidHide_1.5.230_x64.exe
- Size 7.7MB
- SHA256 f4bbbcb82e6258641b887c74bc81c4c5f66e4aa811808dfc304347687b7605f6
- MD5 705173711090d36275d62ca7b111bfc3
- SHA1 f7de49272cbd8a8912f511c3a11471be05b44e2a
- SHA512 d535b8a7ad3d72c2e9b602c59b68ca265c41d500294a7d56d94d8c188277f7f69b8526f5c9a57af3f5bceec18560cb3622aa767e4571c724a299733e78c1f1bc
- SSDEEP 196608:fWFsTuRN2zahf1Y7EcnGf7a+JJIlAmnVTvQf2bu:OFsTuRN2zsmEzRJJPm2ebu
- TLSH T19286D030765EC52AD56205F0592CAB9B911CAE3D0B61E4C7B3CC6D6F2B744CB0636E2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Installer/utils/VC_redist.x64.exe
- Size 24.4MB
- SHA256 cc0ff0eb1dc3f5188ae6300faef32bf5beeba4bdd6e8e445a9184072096b713b
- MD5 486f81facf798678c3244c7cf35a557f
- SHA1 21ce0ee54bff57f69fafa741025bf2f15b356405
- SHA512 e131b93acde5ffc76c19eb0784183a1e94dfa9fe06111a7830eae3ad8583895575dd4dca66aa70efddb243c95735a0105efcd3042b4b5ca445d3d8e8c39d957e
- SSDEEP 786432:mjjpx5hYBug51eEdO41UnAyijgtUHFt9q4YYOQdV:kpx56Bu61eGv1pjg6pb
- TLSH T10A473332E0448026EBE61037A168F5206F7CF624A3649ABBD6CCED0D37B649717FB615
- MD5 SHA1 SHA512 SSDEEP TLSH
Score4/10 -
- Target Installer/utils/ViGEmBus_1.22.0_x64_x86_arm64.exe
- Size 6.0MB
- SHA256 89220a7865076b342892f98865f3499fb7c4cfd673159e89d352c360fd014c6a
- MD5 a62717e3e4306de1dca4fb5c2fa0ac6c
- SHA1 5ec1b1077b43e82c2d3712909c7ed80dd59504dd
- SHA512 960b2cf7d3e301fc8a260ed49a136ffe8c1e30406a4eb64b7ceeaf7f56f33bbb5153825670258a2e254d3dbdb09c0f0f4abffcbb70395416f213a0e2b8061366
- SSDEEP 98304:shxzP3MqBfTluw4yctnfZeos/9/5oe3UOv2NkHLcgpn78NpoEXBhLlvRJSvr0/Pr:s/PdfTUHNY/5oe3UdNWVx78NpBXBhETS
- TLSH T1E756AE31724AC53BD96211B11A2C9E9F612CBE350BB254C7B3DC2E6E1BB54C21736E27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Installer/utils/dotnet-sdk-9.0.301-win-x64.exe
- Size 214.8MB
- SHA256 3eceab630f7523658aea4c47463ed6b105b06b9061c89bd00bfca3378ac166e3
- MD5 f3ed2970b82174f290e9dee9003c65bb
- SHA1 537ab56543c559e520f61f231d8ac8e265765677
- SHA512 2a7a1d35ebe1c6911037ba36ecd041b16401985bf00d19280fae5d0780bd9fc3a69186b77e7a204bd51f07ac22dbd898f99adda56dbe8f89a8d42819763a4c55
- SSDEEP 6291456:Nrg+NNjgVo+RDoTS0uoo9LqkRESOe2ExmmH:bJgV1DoTS08ZmLGmmH
- TLSH T1B7B83337AA2CDFB6E6C12872D478371D1B0C3111560AD46BD3C8DAB62A87AD325B3DD4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score4/10 -
- Target Installer/utils/windowsdesktop-runtime-8.0.3-win-x64.exe
- Size 55.8MB
- SHA256 4c41b24b8ca6c188abd126b09f16903c8902113b7a2763c32906f52a83b30aa4
- MD5 f40b9f69c37efb31447cacc8b8123565
- SHA1 98df32bf470edf3cf78d1cb72bea5d5eeaaaa948
- SHA512 f4cf0300eb4e1750b75a9d973db2d100cd8fb244ef0c7bc5ab448dcc72091055c516d7fe6ea41215bdccec13fc08c5b3c444400c74b214af7f996e5780275f08
- SSDEEP 1572864:2TMRsTq/Mxu8+MjFgbOa0BW1mY5w4Hhb:ISj/Mx5+O2aa02PFBb
- TLSH T112D7337390958739E1E00173B57DFB252D38703853928456F3C8DD64AFA9A83BB3BA52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score4/10