b527c29eeb7427cb9e2b32b45f76185411ba55c95b40a774b053533c8b03433b

Resubmissions

24/08/2026, 12:38

260824-pt3hhatvcx7

17/03/2026, 20:40

260317-zf69msd18x7

14/03/2026, 15:33

260314-szbhrab12z7

Sharing

Copy URL Twitter E-mail

General

Target
Setup Installer_patched.exe
Size 3.1MB
Sample260824-pt3hhatvcx
SHA256 b527c29eeb7427cb9e2b32b45f76185411ba55c95b40a774b053533c8b03433b
MD5 5aa636bfaff0a2f1d08d3bf891cdb286
SHA1 dd4eaa687b434d2c0b2ae2e2390c10ff78e684ad
SHA512 0727c134fc61cde4697a9e111edf69ed1dac98f10c23cd55b78d0ac8a5bfae7e613c447d462cf47bd809402c36ee60a11d38621b4e3a105624977aafdfc801b8
SSDEEP 49152:+wMmA+qRD1vAOs/WT1W6Ogl2d/pCI87I5:+FrjRxvdsuT1W6Ogsd/sI87I5
TLSH
T1A9E512C3E9681ED5F83A63F3B5A744D39AB078FE93A4947770A5F2624142291021FDEC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

execution persistence

Malware Config

Targets

- Target
  Setup Installer_patched.exe
- Size 3.1MB
- SHA256 b527c29eeb7427cb9e2b32b45f76185411ba55c95b40a774b053533c8b03433b
- MD5 5aa636bfaff0a2f1d08d3bf891cdb286
- SHA1 dd4eaa687b434d2c0b2ae2e2390c10ff78e684ad
- SHA512 0727c134fc61cde4697a9e111edf69ed1dac98f10c23cd55b78d0ac8a5bfae7e613c447d462cf47bd809402c36ee60a11d38621b4e3a105624977aafdfc801b8
- SSDEEP 49152:+wMmA+qRD1vAOs/WT1W6Ogl2d/pCI87I5:+FrjRxvdsuT1W6Ogsd/sI87I5
- TLSH
  T1A9E512C3E9681ED5F83A63F3B5A744D39AB078FE93A4947770A5F2624142291021FDEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution persistence
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2 behavioral3 behavioral4

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Deletes itself

Executes dropped EXE

Adds Run key to start application

Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4