General
- Target cmake-4.4.3-windows-x86_64.msi
- Size 37.3MB
- Sample260909-wfpstazzaw
- SHA256 f3b27c83979727b73540db53dbe610967656b4631746a94b17a1dd0329dd7868
- MD5 b475486aca8100752cd79baeaf318731
- SHA1 81f9623cb3dd0ef61113eeee4052729abcb92c4c
- SHA512 c71b4028d94f3ebd92ebae3b00b11dd66d83dec0e76039b5b755b66321c9a5e86a8684533fe57897c2acde324f7f2245a08b49ee25f04e88d4a5da288e72c917
- SSDEEP 786432:M6QEJde2PYU/0DokKA0JgNgOfzPCiWOTGO0rJzHzupInjBA0WHH6xr2H9SzbL:Mjide0sD1aJgNlOiErJDzuajiV6F20L
- TLSH T14B8712717B3CDC4FE556027361D21371AF232A8AF28A03D5DF29195F6EE5AC80317AA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
cmake-4.4.3-windows-x86_64.msi
Resource
win10v2004-20260513-en
14 signatures
180 seconds
Behavioral task
behavioral2
Sample
cmake-4.4.3-windows-x86_64.msi
Resource
win11ltsc2024-20260709-en
15 signatures
180 seconds
Malware Config
Targets
-
- Target cmake-4.4.3-windows-x86_64.msi
- Size 37.3MB
- SHA256 f3b27c83979727b73540db53dbe610967656b4631746a94b17a1dd0329dd7868
- MD5 b475486aca8100752cd79baeaf318731
- SHA1 81f9623cb3dd0ef61113eeee4052729abcb92c4c
- SHA512 c71b4028d94f3ebd92ebae3b00b11dd66d83dec0e76039b5b755b66321c9a5e86a8684533fe57897c2acde324f7f2245a08b49ee25f04e88d4a5da288e72c917
- SSDEEP 786432:M6QEJde2PYU/0DokKA0JgNgOfzPCiWOTGO0rJzHzupInjBA0WHH6xr2H9SzbL:Mjide0sD1aJgNlOiErJDzuajiV6F20L
- TLSH T14B8712717B3CDC4FE556027361D21371AF232A8AF28A03D5DF29195F6EE5AC80317AA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.