General
- Target Setup_stripped.exe
- Size 14KB
- Sample260822-wc2yzastbs
- SHA256 b349e62c28f45d8b73f838f43df154e9c79e7540ee0f4dc491bf25de02e63584
- MD5 8a08eb9fafde0fce7928910d70d72d75
- SHA1 c0f574b42fa890fa0f871949fe61c335ce113459
- SHA512 42a9fe8ae4c428dc29312cb8aae1767e095f76f4499d9f904a84d881faa7e5e7778e93ac7caf53d2ce67bbf798bce0c803ac4a9aff1322e01218986b6188d1c0
- SSDEEP 384:vtYpAifYrtYzOimS09BseCAtVJLLQnDrE:vbifYrtYiimxoenVJP2vE
- TLSH T11C62BF611203D3F8C72A82785A9C199F4955CAE7323A69AEC12FD0BF1CE78F5615D087
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Setup_stripped.exe
Resource
win11-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target Setup_stripped.exe
- Size 14KB
- SHA256 b349e62c28f45d8b73f838f43df154e9c79e7540ee0f4dc491bf25de02e63584
- MD5 8a08eb9fafde0fce7928910d70d72d75
- SHA1 c0f574b42fa890fa0f871949fe61c335ce113459
- SHA512 42a9fe8ae4c428dc29312cb8aae1767e095f76f4499d9f904a84d881faa7e5e7778e93ac7caf53d2ce67bbf798bce0c803ac4a9aff1322e01218986b6188d1c0
- SSDEEP 384:vtYpAifYrtYzOimS09BseCAtVJLLQnDrE:vbifYrtYiimxoenVJP2vE
- TLSH T11C62BF611203D3F8C72A82785A9C199F4955CAE7323A69AEC12FD0BF1CE78F5615D087
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Power Settings
powercfg controls all configurable power system settings on a Windows system and can be abused to prevent an infected host from locking or shutting down.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2PowerShell
1Windows Command Shell
1