General
- Target ESysLauncherPROSetup_2.8.2_Build_160.msi
- Size 67.1MB
- Sample260826-tkmsxasbke
- SHA256 e895b6527385f69c37a9efc223143c1bc337be50854c4dc7cfd45db4e05985b1
- MD5 2899d824d2e5934dd7adc09a444452d4
- SHA1 8335f313b823c2d8accf350ef58b7cc4c0792616
- SHA512 f72e825770067edeef05c09de3b3f580c515592ce6ab4cb1b1a8e5f70741d2ff14f1e09d020a1d06fae4d52237521e1c2bc0160ec6e27a4d3c45bc26a24b928b
- SSDEEP 1572864:kBlDWLwBq1IQ/7jWKOKg37elB3o1q2nDbaV:kBlDo+VQ/7j+h3yUrDuV
- TLSH T1DAF73332758D0E35E2DF387456ADA36E8A713C0407378867B3DDAA1F2792AC09570AD7
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ESysLauncherPROSetup_2.8.2_Build_160.msi
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
ESysLauncherPROSetup_2.8.2_Build_160.msi
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target ESysLauncherPROSetup_2.8.2_Build_160.msi
- Size 67.1MB
- SHA256 e895b6527385f69c37a9efc223143c1bc337be50854c4dc7cfd45db4e05985b1
- MD5 2899d824d2e5934dd7adc09a444452d4
- SHA1 8335f313b823c2d8accf350ef58b7cc4c0792616
- SHA512 f72e825770067edeef05c09de3b3f580c515592ce6ab4cb1b1a8e5f70741d2ff14f1e09d020a1d06fae4d52237521e1c2bc0160ec6e27a4d3c45bc26a24b928b
- SSDEEP 1572864:kBlDWLwBq1IQ/7jWKOKg37elB3o1q2nDbaV:kBlDo+VQ/7j+h3yUrDuV
- TLSH T1DAF73332758D0E35E2DF387456ADA36E8A713C0407378867B3DDAA1F2792AC09570AD7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1System Binary Proxy Execution
1Msiexec
1