General
- Target NSWTLClient-setup-windows.exe
- Size 43.7MB
- Sample260826-yjbrgavfph
- SHA256 810e3c136b6adfaf99fb16654204a2e9b9752f43883e59c518ce188cea058bb3
- MD5 f4e1b8465fb6efc5f0b6e5c7257b6cb1
- SHA1 fd4ad63cddadf1e8fb6c17b4d47c41dd6b29ea73
- SHA512 7172c63882db75977dc884d0bd8c28130e2eb033a2be3ae50326debd74f782427e4e618981337e911df2f0bdfc24f6234fab642b0b7f7b17e34597b1af8354d3
- SSDEEP 786432:g8ByYOCuUdIyP0F8bMg6gPbkyw9SaKetSaG+vmZWwZQlveWxTZhxH8f71aW6Z7ss:g8ByYOgmdK36wky9MtSX1WpJDdZm7HIz
- TLSH T16CA7333BA1CFB53DD19E0A373E769514483F2B9196238C06D6E8881CDF264711E3FA96
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
NSWTLClient-setup-windows.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target NSWTLClient-setup-windows.exe
- Size 43.7MB
- SHA256 810e3c136b6adfaf99fb16654204a2e9b9752f43883e59c518ce188cea058bb3
- MD5 f4e1b8465fb6efc5f0b6e5c7257b6cb1
- SHA1 fd4ad63cddadf1e8fb6c17b4d47c41dd6b29ea73
- SHA512 7172c63882db75977dc884d0bd8c28130e2eb033a2be3ae50326debd74f782427e4e618981337e911df2f0bdfc24f6234fab642b0b7f7b17e34597b1af8354d3
- SSDEEP 786432:g8ByYOCuUdIyP0F8bMg6gPbkyw9SaKetSaG+vmZWwZQlveWxTZhxH8f71aW6Z7ss:g8ByYOgmdK36wky9MtSX1WpJDdZm7HIz
- TLSH T16CA7333BA1CFB53DD19E0A373E769514483F2B9196238C06D6E8881CDF264711E3FA96
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.