General
- Target wireguard-installer.exe
- Size 84KB
- Sample260820-wds3fssemd
- SHA256 6962b6f42bc442e2a822608817222c93c7ef03f34476337608b170d4d76fd5f3
- MD5 1bf9cc7f07133beb89f211f3b7036644
- SHA1 40c7c567fde1ce97740a35cb305e1c2a1affa190
- SHA512 9c65bc90088720de4dc49b0f322e77cc7068848b6c5185fd53bb44413bdea1bec04348e05f978a31fb33a4ab25ee352ee1d65a0b0befdf450c85929edd06b5e4
- SSDEEP 1536:hjsN7fIPlWbKy5+9+q0xkJVj4xq/4i98+aGrI1DOb:hYRI052/0xUV0wQi98+aGKDOb
- TLSH T126835B42E68253E9E1138DFCE0D9723B9A715D054B20D6F3EBB8F611E6702DC9638D49
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
wireguard-installer.exe
Resource
win11-20260513-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target wireguard-installer.exe
- Size 84KB
- SHA256 6962b6f42bc442e2a822608817222c93c7ef03f34476337608b170d4d76fd5f3
- MD5 1bf9cc7f07133beb89f211f3b7036644
- SHA1 40c7c567fde1ce97740a35cb305e1c2a1affa190
- SHA512 9c65bc90088720de4dc49b0f322e77cc7068848b6c5185fd53bb44413bdea1bec04348e05f978a31fb33a4ab25ee352ee1d65a0b0befdf450c85929edd06b5e4
- SSDEEP 1536:hjsN7fIPlWbKy5+9+q0xkJVj4xq/4i98+aGrI1DOb:hYRI052/0xUV0wQi98+aGKDOb
- TLSH T126835B42E68253E9E1138DFCE0D9723B9A715D054B20D6F3EBB8F611E6702DC9638D49
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.