General
- Target aop.zip
- Size 77.8MB
- Sample260825-saffeatfnb
- SHA256 a8e0a9d0420514a6d6aa8b971cde76f3663dc7928c114c257e983a6f7dd77a6f
- MD5 b4e2d94065d59a4b32f0d85b8a0e59b7
- SHA1 e664206c38151a41ea3ad4299b698843a179f2b7
- SHA512 eda8f43f7cd05afe8fe13267b93647eea7b7a50a948780e820f94068ddd6b8327a23ebdf9b5a19b6acc818e13b6704c848c893404ba27fa9236682c4f0ed86b3
- SSDEEP 1572864:4C1cqqGqcKaUEdg9a1usUmjNnmJOQ3/UdAkS+XTx/DVnQu9Y:0jC/u3m5mj3/UdAkS+Dx/RY
- TLSH T1FF0833331EEAB3FD39AA59418E35ED1BB37B3080B11505A1018EA345FFBA91B15B1CD9
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
aopr_setup_en.msi
Resource
win10v2004-20260513-es
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
aopr_setup_en.msi
Resource
win11ltsc2024-20260709-es
26 signatures
150 seconds
Malware Config
Targets
-
- Target aopr_setup_en.msi
- Size 78.2MB
- SHA256 9d00141c00c52bfe67320d306b7e7570f02b0e7aee391f4e49bdef47528d2bd7
- MD5 9d7ebf66b7e3dd52712ec3fc2ec8699f
- SHA1 441afef9cda382a6ff1bdbe84e63fc5fba2f04d7
- SHA512 7e7e9222be51dbc84856048577a853bd55cbb9cf9d0541992ba788bfa6dfe47611a263da13042fcd6fbf4f4813ee2307e34644e62ded820f1401b96db6f3bdd5
- SSDEEP 1572864:mhsQSBGTBG1Eoi63x46bsqDCDOJXs7Gxuww/w/QvI25k:3cTkrxnDLJXs7Gxuwuw/Ek
- TLSH T164083323B18AD2B4D8E80575C53AFEF2F2B66E14C69015B760C5FC887FB25816732786
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Suspicious use of NtSetInformationThreadHideFromDebugger