General
- Target AvaTrackerInstaller_v1.0.0.zip
- Size 60.4MB
- Sample260823-r1e2wsae75
- SHA256 8f56c1283ae4f6c758c538339e958aaab732e2c11b2aa1ead4355383d74ce857
- MD5 c73bff0a2dc162807fe796267759823c
- SHA1 1a71d544c865fc5d3c5f931f9baffeea7b4161ec
- SHA512 2e848333c52c1b2193815ce97237ececb8f85b190efb5bdac89704cbdfc0058b08e38413c048a079582253797ffec2b59de7473359d1c472c57a3038560de05f
- SSDEEP 1572864:AAzFxnM6UgNPxd2ilrHPAHLOmujkn7PYJ0+/iw1zaDtT:AARlTBNPDXdvmLMje7PnW1mR
- TLSH T11ED73325CDF39A1CA9A25A5F22A084871BDAC37EDBF3F69F7157C304AC119C42875A34
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
AvaTrackerInstaller_v1.0.0.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
AvaTrackerInstaller_v1.0.0.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target AvaTrackerInstaller_v1.0.0.exe
- Size 60.9MB
- SHA256 d904af9a4d5729f804d4b4497559b6d2a82a8d0634f9dabff5d90cfc271ce674
- MD5 3d64d21b12a313b1c2c5f9e6db35513a
- SHA1 013ae282f21810764178ce33494e5021949c8f79
- SHA512 99e4643ad404d0136cc842a933af48aa962e71594ec4463d073686ea8b999ed7ec3f64e1d14662e23fccf6cdfa46ed8a76dd876a092d95ac2324975dc0128194
- SSDEEP 1572864:uOlj5T6e+AjVlRs6bX5vKn1mIoJEnDtq9Emfq4HlQV0z:uOx1n7jVXfjda1oJqDtDsHq6
- TLSH T1FEE73333E696533DE06A4A3B15F0D0411E7B9725E5AB8C5BA3F4850CDF1A0A02D3FB66
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.