General
- Target MPluginManager_02_28_setup.exe
- Size 16.4MB
- Sample260816-adswsswckd
- SHA256 7b66ad779b86165054a038c34a44bbc33799e1c8f991799326e70dc3ded99593
- MD5 45e099f57f78e6f2d802d1fc01098579
- SHA1 7c5bc69ea8f9a361ba1954db27b56d3d7294123f
- SHA512 4e45cd081c9888c30bb890a31f16050a31d526cdcffe795841376b2327447b2a43c0e3cce53733593ecabd059ab0621be23fb15d1303acfa0abeecf5edabc6d7
- SSDEEP 393216:9PjRV3SvSY2W4tCXIInNIviCebtd8GgIMmtNP8yJwSCalp37:ZjRViV0CXIINWLebH8Gga8yJwSh7
- TLSH T10A072323738B6E3EE46A5A3755B19130D8376E21B45A8C4696E4384CCF3AC903D7EF46
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
MPluginManager_02_28_setup.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
MPluginManager_02_28_setup.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target MPluginManager_02_28_setup.exe
- Size 16.4MB
- SHA256 7b66ad779b86165054a038c34a44bbc33799e1c8f991799326e70dc3ded99593
- MD5 45e099f57f78e6f2d802d1fc01098579
- SHA1 7c5bc69ea8f9a361ba1954db27b56d3d7294123f
- SHA512 4e45cd081c9888c30bb890a31f16050a31d526cdcffe795841376b2327447b2a43c0e3cce53733593ecabd059ab0621be23fb15d1303acfa0abeecf5edabc6d7
- SSDEEP 393216:9PjRV3SvSY2W4tCXIInNIviCebtd8GgIMmtNP8yJwSCalp37:ZjRViV0CXIINWLebH8Gga8yJwSh7
- TLSH T10A072323738B6E3EE46A5A3755B19130D8376E21B45A8C4696E4384CCF3AC903D7EF46
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.