General
- Target Setup_Installer_patched.exe
- Size 3.4MB
- Sample260824-pt2k7stvcw
- SHA256 fb6223c829f6d5e0cfc087af75dd54ba31597fa155ee0d95daf7e82790e8f758
- MD5 3f470ae352a5aa088d0fdf283f4ed8d0
- SHA1 5dea67b8714aa28fa215a5397b12adb86e7f3d0f
- SHA512 d9d39b481a2feed6f4136ed522b9112c8d0954798537684c55619e14c3a83c5df89efa738374d69413fcec480c0969e406c8b7f304d976ed7c2a809a07df4b80
- SSDEEP 98304:Uro9HoeB9MpXHpro9HoeB9MpXHueBbAvlEsxif4hd6Cxt4Jpb7ujZy:UrERMpXHprERMpXHLZAvlnYaTM/7udy
- TLSH T18EF52366A9D070A1E8B84732C1A305F2853AFD7A67A616DB149CF7344B421C0A93F7DF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Setup_Installer_patched.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
Setup_Installer_patched.exe
Resource
win10ltsc2021-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral3
Sample
Setup_Installer_patched.exe
Resource
win11-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral4
Sample
Setup_Installer_patched.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target Setup_Installer_patched.exe
- Size 3.4MB
- SHA256 fb6223c829f6d5e0cfc087af75dd54ba31597fa155ee0d95daf7e82790e8f758
- MD5 3f470ae352a5aa088d0fdf283f4ed8d0
- SHA1 5dea67b8714aa28fa215a5397b12adb86e7f3d0f
- SHA512 d9d39b481a2feed6f4136ed522b9112c8d0954798537684c55619e14c3a83c5df89efa738374d69413fcec480c0969e406c8b7f304d976ed7c2a809a07df4b80
- SSDEEP 98304:Uro9HoeB9MpXHpro9HoeB9MpXHueBbAvlEsxif4hd6Cxt4Jpb7ujZy:UrERMpXHprERMpXHLZAvlnYaTM/7udy
- TLSH T18EF52366A9D070A1E8B84732C1A305F2853AFD7A67A616DB149CF7344B421C0A93F7DF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Deletes itself
-
Executes dropped EXE
-
Adds Run key to start application
-
Suspicious use of SetThreadContext