General
- Target MakuTweaker 5.7.3.exe
- Size 78.5MB
- Sample260816-jdvj3aseqb
- SHA256 46fdb00a67a5efa78287031d605d765923f3ed7f8e58aec0b0d6d242f741ce0f
- MD5 cb6f384bcb2950320b3dc7844d4985e3
- SHA1 d02c50e100e08cd78f75988f722c629c1c0ee5c7
- SHA512 89d3f14bc8c6a18195fb21361d09d0e9b3d13b2727c8eb8fb564b208d93140324d02cb4be53f449d779a6b87b3f9f90098fcd7eec8f95f4d684a9bd50f10e395
- SSDEEP 1572864:Vzfm8i3SNTn1u2Kyy1ygvNRmk8x/gLRy0p1o0/Oh:V68i3SNTXKNIx/U3fo0Gh
- TLSH T103082356E2FD00E8E5BAC0B8C6575517E7B23415173497EB62A88A692F33FE06E3D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
MakuTweaker 5.7.3.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
MakuTweaker 5.7.3.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target MakuTweaker 5.7.3.exe
- Size 78.5MB
- SHA256 46fdb00a67a5efa78287031d605d765923f3ed7f8e58aec0b0d6d242f741ce0f
- MD5 cb6f384bcb2950320b3dc7844d4985e3
- SHA1 d02c50e100e08cd78f75988f722c629c1c0ee5c7
- SHA512 89d3f14bc8c6a18195fb21361d09d0e9b3d13b2727c8eb8fb564b208d93140324d02cb4be53f449d779a6b87b3f9f90098fcd7eec8f95f4d684a9bd50f10e395
- SSDEEP 1572864:Vzfm8i3SNTn1u2Kyy1ygvNRmk8x/gLRy0p1o0/Oh:V68i3SNTXKNIx/U3fo0Gh
- TLSH T103082356E2FD00E8E5BAC0B8C6575517E7B23415173497EB62A88A692F33FE06E3D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Loads dropped DLL
Checks whether UAC is enabled
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
Power Settings
powercfg controls all configurable power system settings on a Windows system and can be abused to prevent an infected host from locking or shutting down.