General
- Target Nostwin_Setup.exe
- Size 2.5MB
- Sample260826-wrnd5atela
- SHA256 793916987b4cc13771641406e035665da609c5f4a1d5269d879418dda1b71e57
- MD5 ae248aade44dc657e429583d5f6201ce
- SHA1 ae0555272bb67a41e46e2ff4dc49ae0655d17c21
- SHA512 6049e7800bbdd5415c1b0c8d4d8398348cf47538e667aa0e1884ec85d3018a392f9daa109cdb3e72f7aefe7eeb2344b540a335c6fca3ff3fa434e559fb735981
- SSDEEP 49152:iuI2hYnN9oEdXfJcLpeHoKLD8BMrpW03uzP047w:i5OqJcLkbD8BiR
- TLSH T16FC5E03FB28B653EE06A5A367A72E210593B7A6165138C0697F4C84CCF254B11E3F787
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Nostwin_Setup.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target Nostwin_Setup.exe
- Size 2.5MB
- SHA256 793916987b4cc13771641406e035665da609c5f4a1d5269d879418dda1b71e57
- MD5 ae248aade44dc657e429583d5f6201ce
- SHA1 ae0555272bb67a41e46e2ff4dc49ae0655d17c21
- SHA512 6049e7800bbdd5415c1b0c8d4d8398348cf47538e667aa0e1884ec85d3018a392f9daa109cdb3e72f7aefe7eeb2344b540a335c6fca3ff3fa434e559fb735981
- SSDEEP 49152:iuI2hYnN9oEdXfJcLpeHoKLD8BMrpW03uzP047w:i5OqJcLkbD8BiR
- TLSH T16FC5E03FB28B653EE06A5A367A72E210593B7A6165138C0697F4C84CCF254B11E3F787
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.