General
- Target ableton-live-9-1-9-64-bit-multi-win.zip
- Size 715.0MB
- Sample260816-bexrtaxalb
- SHA256 f6c9d593395ff36261dc1119878fe5337a9fe3758ce9a198a1cbdf84e29addf2
- MD5 0e85287e72ea19a7232376b019c13375
- SHA1 30a65da8c5d085ceb8339422a6f04ac54689b081
- SHA512 ef84a9cbd1a5dd94455191e0e6b19594bae2f575d9fa5176e296f8ec7ee49e2f1394d5ee5b9805b3ea359ef13cba4f2a3203daaa3264f2a6ca1ba1a91c8a8b9b
- SSDEEP 12582912:KeYu5xkF9tN6fcEQusbazOlzllM9YYXbGtOAP54Mv9c2prj8EJG048aWZHbv6k1s:KsO97MQFZl6bXbPABPmen8puv625Q
- TLSH T15379335134375E97D1877637A3560346BF603C61A701CE22EA31BA9F1EBE2D42AB94C3
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Setup.msi
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
Setup.msi
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target Setup.msi
- Size 715.0MB
- SHA256 cb6552ec9a7c6839c58f14d094360885f4793ebdccc1b4b652b55616aafb9e9a
- MD5 74503f7a8a0b49bd5884245ea119c227
- SHA1 fca21579661cacc5d85b898f448d696d7dad64df
- SHA512 ca0adc2f557a92eea3d91f48370545bce0e2971c28a4c66181e1d3fe87fcccf7baa47567eff58ec9f8c860c83a8f163769c8d41f5aa3c4013e33eaadade7f9c9
- SSDEEP 12582912:aeYu5xkF9tN6fcEQusbazOlzllM9YYXbGtOAP54Mv9c2prj8EJG048aWZHbv6k1T:asO97MQFZl6bXbPABPmen8puv625
- TLSH T1A079335134375E97D1877637A3560346BF603C61A701CE22EA31BA9F1EBE2D42AB94C3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Modifies file permissions
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Drops desktop.ini file(s)
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.