General
- Target Installer_91473f.msi
- Size 13.2MB
- Sample260822-pellfayvb1
- SHA256 2783dbc396d12e6d7a480e9e2739cd8ff8d5018d610fb707452f75380afa7603
- MD5 4170a4ce056b6c469ddbb8e3428619dc
- SHA1 9ddcbf52fb7f0d1eeaa4d7516cc89ecad0823577
- SHA512 4ee5c378875a1f74d7660e9defe2cffa9b621a37fdb91c107eee3786814b681325065a6612ddcdfe096c61e9fd73f73072ddfe448148d70ca5df5e3192614c5a
- SSDEEP 393216:YiUNI6isalHZ9m/NjZI/i6ZB2LpgU7fpxiv24L:Y5NAINCZB2LPfip
- TLSH T164E63365F96F1B28F7183779457589824D23BC0DB748DA3271AA73E417F6AF8A2F0060
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Installer_91473f.msi
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
Installer_91473f.msi
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target Installer_91473f.msi
- Size 13.2MB
- SHA256 2783dbc396d12e6d7a480e9e2739cd8ff8d5018d610fb707452f75380afa7603
- MD5 4170a4ce056b6c469ddbb8e3428619dc
- SHA1 9ddcbf52fb7f0d1eeaa4d7516cc89ecad0823577
- SHA512 4ee5c378875a1f74d7660e9defe2cffa9b621a37fdb91c107eee3786814b681325065a6612ddcdfe096c61e9fd73f73072ddfe448148d70ca5df5e3192614c5a
- SSDEEP 393216:YiUNI6isalHZ9m/NjZI/i6ZB2LpgU7fpxiv24L:Y5NAINCZB2LPfip
- TLSH T164E63365F96F1B28F7183779457589824D23BC0DB748DA3271AA73E417F6AF8A2F0060
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Suspicious use of NtSetInformationThreadHideFromDebugger