General
- Target LittleNavmap-win64-3.0.18-Install.exe
- Size 118.8MB
- Sample260903-lp7d4sen9v
- SHA256 190020683084088a58954bc043566ddd98e00d9383100c610b753e9a8a14ec1e
- MD5 699fa79ef0980120223e42100bb5fae3
- SHA1 0f51e1b4d0f613609bb69c10fb4b1e34f042014f
- SHA512 96a24977cff77e68c97b3bccef0150e607766a25afeb178e31deae3e63ee4f35d2791702b7dedca41cd8251a5877f286ff00411efb870bd0d0bbe496c14a63a7
- SSDEEP 3145728:ReQkpSihbaSuxKbEv7w1v7yqG1kMXEHK6dr7:PitmKYv7wwqCX+Jr7
- TLSH T18F583333F19E573EE0A90B375BB2B5180937B621E06E6D9F99E8085CDF584811C7D2A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
LittleNavmap-win64-3.0.18-Install.exe
Resource
win11-20260513-en
28 signatures
150 seconds
Malware Config
Targets
-
- Target LittleNavmap-win64-3.0.18-Install.exe
- Size 118.8MB
- SHA256 190020683084088a58954bc043566ddd98e00d9383100c610b753e9a8a14ec1e
- MD5 699fa79ef0980120223e42100bb5fae3
- SHA1 0f51e1b4d0f613609bb69c10fb4b1e34f042014f
- SHA512 96a24977cff77e68c97b3bccef0150e607766a25afeb178e31deae3e63ee4f35d2791702b7dedca41cd8251a5877f286ff00411efb870bd0d0bbe496c14a63a7
- SSDEEP 3145728:ReQkpSihbaSuxKbEv7w1v7yqG1kMXEHK6dr7:PitmKYv7wwqCX+Jr7
- TLSH T18F583333F19E573EE0A90B375BB2B5180937B621E06E6D9F99E8085CDF584811C7D2A3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Modify Registry
2Subvert Trust Controls
1Install Root Certificate
1