General
- Target Setup_Installer_patched.exe
- Size 3.4MB
- Sample260824-pt2wzagl91
- SHA256 df825349958dd1963991dacb73f344fe4b0c2c2f8c6e56cd43f85ccbc8dcc74f
- MD5 1a5ca53a1abbf680bd5c0f51618a4709
- SHA1 f6417d460f36767b1a6d49a8477dbcb7aa5bbc5b
- SHA512 61a5cf84899fbf88dffcbafc7d74d26f4bc4378ce342b5ed96b224b54ae7dfa9f7e4efb65b2f29d4727438d113cfea654d47c5a6a329ec1a1fd2abceafd4e64e
- SSDEEP 49152:gJQRJQki6GqsCdtYHfmW3pLYD9WFib7nMaNsDrJzTAf2u2wn:g2R2ki6GqsCAHfmwUD9WFsQaNsDrin
- TLSH T155F52247A3E176E2D0B56332FDE732531731B4DC9B6A0F0F1688A078198F1C95AB179A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Setup_Installer_patched.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
Setup_Installer_patched.exe
Resource
win10ltsc2021-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral3
Sample
Setup_Installer_patched.exe
Resource
win11-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral4
Sample
Setup_Installer_patched.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target Setup_Installer_patched.exe
- Size 3.4MB
- SHA256 df825349958dd1963991dacb73f344fe4b0c2c2f8c6e56cd43f85ccbc8dcc74f
- MD5 1a5ca53a1abbf680bd5c0f51618a4709
- SHA1 f6417d460f36767b1a6d49a8477dbcb7aa5bbc5b
- SHA512 61a5cf84899fbf88dffcbafc7d74d26f4bc4378ce342b5ed96b224b54ae7dfa9f7e4efb65b2f29d4727438d113cfea654d47c5a6a329ec1a1fd2abceafd4e64e
- SSDEEP 49152:gJQRJQki6GqsCdtYHfmW3pLYD9WFib7nMaNsDrJzTAf2u2wn:g2R2ki6GqsCAHfmwUD9WFsQaNsDrin
- TLSH T155F52247A3E176E2D0B56332FDE732531731B4DC9B6A0F0F1688A078198F1C95AB179A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Deletes itself
-
Executes dropped EXE
-
Adds Run key to start application
-
Suspicious use of SetThreadContext