Resubmissions

07/09/2026, 14:46

260907-r5p3nayflc7

07/09/2026, 14:30

260907-rt9ypabm8v7

Analysis

  • user interaction
    yes
  • max time kernel
    899s
  • max time network
    374s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    07/09/2026, 14:30

General

  • Target
    WeighMax-Setup-1.1.0 (1).exe
  • Size 12.1MB
  • Sample260907-rt9ypabm8v
  • SHA256 f5078c1f2b606837be8e7a88582c0e83332aeec44131493a33441416d1929c0b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 2 IoCs
  • Loads dropped DLL 9 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Program Files directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Inno Setup is an open-source installation builder for Windows applications. 3 IoCs

    Inno Setup installer

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of FindShellTrayWindow 3 IoCs
  • Suspicious use of SetWindowsHookEx 10 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\WeighMax-Setup-1.1.0 (1).exe
    "C:\Users\Admin\AppData\Local\Temp\WeighMax-Setup-1.1.0 (1).exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:4424
    • C:\Users\Admin\AppData\Local\Temp\is-82KK7CNXKV.tmp\WeighMax-Setup-1.1.0 (1).tmp
      "C:\Users\Admin\AppData\Local\Temp\is-82KK7CNXKV.tmp\WeighMax-Setup-1.1.0 (1).tmp" /SL5="$50118,11506720,872448,C:\Users\Admin\AppData\Local\Temp\WeighMax-Setup-1.1.0 (1).exe"
      2⤵
      • Executes dropped EXE
      • Drops file in Program Files directory
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:3256
      • C:\Program Files\WeighMax\weighment.exe
        "C:\Program Files\WeighMax\weighment.exe"
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SetWindowsHookEx
        PID:3164

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        app.so

        • Path C:\Program Files\WeighMax\data\app.so
        • Size 6.6MB
        • SHA256 e734d895992bc4382c55949c6b230b2c5e92c76e8adb221e891ad6fb52066f6f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        AssetManifest.bin

        • Path C:\Program Files\WeighMax\data\flutter_assets\AssetManifest.bin
        • Size 28KB
        • SHA256 224677f5ef63432808e140b1797da2d1693df71480ce8755c9a8f8072f1e2d7d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        FontManifest.json

        • Path C:\Program Files\WeighMax\data\flutter_assets\FontManifest.json
        • Size 359B
        • SHA256 381a38e02fc2674eecda06d5f6bb0da436af9f0d39282efa14929e417b6febd1
        • MD5 SHA1 SHA512 TLSH

        NativeAssetsManifest.json

        • Path C:\Program Files\WeighMax\data\flutter_assets\NativeAssetsManifest.json
        • Size 131B
        • SHA256 4ac70f7d67abb2ffc105d2cabfdee68c9aa138d132107e5be4949c539f7ce379
        • MD5 SHA1 SHA512 TLSH

        Stack%20-%20Light.ttf

        • Path C:\Program Files\WeighMax\data\flutter_assets\assets\fonts\Stack%20-%20Light.ttf
        • Size 76KB
        • SHA256 a699f4bc51bdddcb3f48c7a40291f6e9b9f39bae24eee83a9c5be97500372d19
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Stack%20-%20Regular.ttf

        • Path C:\Program Files\WeighMax\data\flutter_assets\assets\fonts\Stack%20-%20Regular.ttf
        • Size 76KB
        • SHA256 41d0548f8da45fc2e10ee77b53f80113e50ecd25caa96d571a7ccc3fa8779859
        • MD5 SHA1 SHA512 SSDEEP TLSH

        eye-off.png

        • Path C:\Program Files\WeighMax\data\flutter_assets\assets\icons\form\eye-off.png
        • Size 2KB
        • SHA256 c38fe30849fd11cc8991d76f03c134897a434bb04f97a6f51b073f14c7bf293b
        • MD5 SHA1 SHA512 TLSH

        eye-on.png

        • Path C:\Program Files\WeighMax\data\flutter_assets\assets\icons\form\eye-on.png
        • Size 1KB
        • SHA256 588402247b0f3466ae3ac6987a8e92e2e09e8b2804b2c0cf8d46eeca5dfa77f6
        • MD5 SHA1 SHA512 TLSH

        Disconnected%20-%20Icon.svg

        • Path C:\Program Files\WeighMax\data\flutter_assets\assets\icons\monitor\Disconnected%20-%20Icon.svg
        • Size 1KB
        • SHA256 f507c5b4323ee229393e64e396c70a9a149e3ef8a7eb57a43b9a15d342468c79
        • MD5 SHA1 SHA512 TLSH

        Time%20Icon.svg

        • Path C:\Program Files\WeighMax\data\flutter_assets\assets\icons\monitor\Time%20Icon.svg
        • Size 839B
        • SHA256 238f7da1e6108b3f37ed5d2f65a9c8fdf31e133d43fd3e2b77a9e00ba3db60ba
        • MD5 SHA1 SHA512 TLSH

        Dashboard%20Icon.svg

        • Path C:\Program Files\WeighMax\data\flutter_assets\assets\icons\nav\Dashboard%20Icon.svg
        • Size 2KB
        • SHA256 d57adde4d6589a4c5399aaa97693fe08c00fcfa5d9730189ac7f4b1270a660bc
        • MD5 SHA1 SHA512 TLSH

        Report%20Icon.svg

        • Path C:\Program Files\WeighMax\data\flutter_assets\assets\icons\nav\Report%20Icon.svg
        • Size 1KB
        • SHA256 5bd26e21b6cea34e4d5117bc8814627369453adce791cb14c2d701a2796b7e74
        • MD5 SHA1 SHA512 TLSH

        Settings%20Icon.svg

        • Path C:\Program Files\WeighMax\data\flutter_assets\assets\icons\nav\Settings%20Icon.svg
        • Size 2KB
        • SHA256 d10fb336ecf2e8f1baf19bfbaf315631e3602137e1540b5ff62b9a667e06edde
        • MD5 SHA1 SHA512 TLSH

        Support%20Icon.svg

        • Path C:\Program Files\WeighMax\data\flutter_assets\assets\icons\nav\Support%20Icon.svg
        • Size 862B
        • SHA256 3ba14cdbf72fc1834fbec4471b2cfab010ed1f90e70a0499d72ab2238cc98c51
        • MD5 SHA1 SHA512 TLSH

        weighmax-logo.png

        • Path C:\Program Files\WeighMax\data\flutter_assets\assets\icons\weighment_section\weighmax-logo.png
        • Size 53KB
        • SHA256 1536187cce8925cf3867498ed5eb197393089040b6d8539708191126f5bb3f03
        • MD5 SHA1 SHA512 SSDEEP TLSH

        banner_image.jpg

        • Path C:\Program Files\WeighMax\data\flutter_assets\assets\images\banner_image.jpg
        • Size 72KB
        • SHA256 9cc314a5d692a5702a615e7e81cb21c09b7cd318a9ca0efb7c1d71ce4df1d420
        • MD5 SHA1 SHA512 SSDEEP TLSH

        hero_tunnel.jpg

        • Path C:\Program Files\WeighMax\data\flutter_assets\assets\images\hero_tunnel.jpg
        • Size 175KB
        • SHA256 10f5db4486e377c8b92003a4eb14567a8ddba5dd4ac9f01a67f9378243b917f8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MaterialIcons-Regular.otf

        • Path C:\Program Files\WeighMax\data\flutter_assets\fonts\MaterialIcons-Regular.otf
        • Size 1.6MB
        • SHA256 d9865b671a09d683d13a863089d8825e0f61a37696ce5d7d448bc8023aa62453
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-GRP8XMEZMW.tmp

        • Path C:\Program Files\WeighMax\data\flutter_assets\packages\intl_phone_field\assets\flags\is-GRP8XMEZMW.tmp
        • Size 165B
        • SHA256 9ee35ebde612571653bdbd8051f106dc7f690050309363f9e97d0fbc8c555677
        • MD5 SHA1 SHA512 TLSH

        is-GRWGJ8HEOX.tmp

        • Path C:\Program Files\WeighMax\data\flutter_assets\packages\intl_phone_field\assets\flags\is-GRWGJ8HEOX.tmp
        • Size 260B
        • SHA256 d0772c967dc04066f26913165ae380c6af5ad013b2b27dac726d14d294a9bc47
        • MD5 SHA1 SHA512 TLSH

        is-RZGJNIY721.tmp

        • Path C:\Program Files\WeighMax\data\flutter_assets\packages\intl_phone_field\assets\flags\is-RZGJNIY721.tmp
        • Size 500B
        • SHA256 3945b5f183e0729ffb90ee38ff78aba7916e09d172232623d0ffdac6409932e8
        • MD5 SHA1 SHA512 TLSH

        icudtl.dat

        • Path C:\Program Files\WeighMax\data\icudtl.dat
        • Size 842KB
        • SHA256 998367809a821d595928089c197b3f7959f0420f81f79d4d0daee53378492ed5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        flutter_libserialport_plugin.dll

        • Path C:\Program Files\WeighMax\flutter_libserialport_plugin.dll
        • Size 42KB
        • SHA256 7a11eb8b3145b29ef4d09cbf25538faa6b26590a70147983e6765a47d6b490a9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        flutter_windows.dll

        • Path C:\Program Files\WeighMax\flutter_windows.dll
        • Size 20.3MB
        • SHA256 67db13c69a0ce93242d11c2f99dd86ccbabce18ea9de613f126e9e31817d6de6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        screen_retriever_windows_plugin.dll

        • Path C:\Program Files\WeighMax\screen_retriever_windows_plugin.dll
        • Size 117KB
        • SHA256 5027ebc68174a93cc785bf70d4134cbdd370fd1a4273a72c1679bf84df0cee65
        • MD5 SHA1 SHA512 SSDEEP TLSH

        serialport.dll

        • Path C:\Program Files\WeighMax\serialport.dll
        • Size 58KB
        • SHA256 f4ec42da8f1087cd56511e8c883353435c6967216a630c2a1440f6ec2d3f4f03
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sqlite3.dll

        • Path C:\Program Files\WeighMax\sqlite3.dll
        • Size 1.6MB
        • SHA256 2bf39f2aadafdc59a90b260f582a8fccebc5b89eb94175fdbaa9148c1e1f084d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        weighment.exe

        • Path C:\Program Files\WeighMax\weighment.exe
        • Size 89KB
        • SHA256 3c6ce607af77dc9925e0859e93f88e186553c4b2065c23c9fe808f976f30dd3c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        window_manager_plugin.dll

        • Path C:\Program Files\WeighMax\window_manager_plugin.dll
        • Size 127KB
        • SHA256 846a616ce2c677f400788829e6e9e69d4e07c9906ab26d7a08dfd8c78de5bda0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        WeighMax-Setup-1.1.0 (1).tmp

        • Path C:\Users\Admin\AppData\Local\Temp\is-82KK7CNXKV.tmp\WeighMax-Setup-1.1.0 (1).tmp
        • Size 4.2MB
        • SHA256 ba8506e129682a5396a4789dd38f42b4eccda01660e0e097ed6d7d2ccb966f4d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        2026-09-07.log

        • Path C:\Users\Admin\AppData\Roaming\WeighMax\WeighMax\logs\app\2026-09-07.log
        • Size 483B
        • SHA256 049ce79454e247322afadcdcee0b42867c8f9b4c9d2b89ebe5d2da960a8b0984
        • MD5 SHA1 SHA512 TLSH

        memory/3164-631-0x0000017BCD9B0000-0x0000017BCD9B1000-memory.dmp

        memory/3164-636-0x0000017BD0400000-0x0000017BD0480000-memory.dmp

        memory/3164-635-0x0000017BD0400000-0x0000017BD0480000-memory.dmp

        memory/3164-627-0x0000017BCD9A0000-0x0000017BCD9A1000-memory.dmp

        memory/3164-628-0x0000017BCFD20000-0x0000017BD03C1000-memory.dmp

        memory/3164-629-0x0000017BCFD20000-0x0000017BD03C1000-memory.dmp

        memory/3164-630-0x0000017BCFD20000-0x0000017BD03C1000-memory.dmp

        memory/3256-9-0x0000000001BA0000-0x0000000001BA1000-memory.dmp

        memory/3256-8-0x0000000000D70000-0x00000000011AF000-memory.dmp

        memory/3256-625-0x0000000000D70000-0x00000000011AF000-memory.dmp

        memory/3256-5-0x0000000001BA0000-0x0000000001BA1000-memory.dmp

        memory/3256-633-0x0000000000D70000-0x00000000011AF000-memory.dmp

        memory/4424-0-0x0000000000820000-0x0000000000903000-memory.dmp

        memory/4424-7-0x0000000000820000-0x0000000000903000-memory.dmp

        memory/4424-637-0x0000000000820000-0x0000000000903000-memory.dmp