General
- Target AD.msi
- Size 11.0MB
- Sample260910-pk6tkawxfv
- SHA256 8593dd2fc0002436590f3803a9d9ff6f158afacd74bff65c737cec1b048d7204
- MD5 46f95746c111ad43441a1499954f52b4
- SHA1 06f95433351b7d5a22a2ac3501a0b1ac46d8add7
- SHA512 9e69f8c50f0baa95ddeacd99f9815be8400c34025e739ce32d27379f9f3c2f65fff26157096f575beafdf31dad0430768e68fa6f96bce74f5f370130f8d0e9fa
- SSDEEP 196608:zxbTdsMKdZV0cF28hExgMcgXH6KnNKbC2xlJLJQiLHL7UY8AaEf3yNnq:9XdsldndFdOgMZH6mK22xbLyOHf2Aa61
- TLSH T105C63393A185CA34D221EDB2D02F833D87BAA4761D2535B7AB11ED3DC5BB94133BE244
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
AD.msi
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
AD.msi
Resource
win11ltsc2024-20260709-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target AD.msi
- Size 11.0MB
- SHA256 8593dd2fc0002436590f3803a9d9ff6f158afacd74bff65c737cec1b048d7204
- MD5 46f95746c111ad43441a1499954f52b4
- SHA1 06f95433351b7d5a22a2ac3501a0b1ac46d8add7
- SHA512 9e69f8c50f0baa95ddeacd99f9815be8400c34025e739ce32d27379f9f3c2f65fff26157096f575beafdf31dad0430768e68fa6f96bce74f5f370130f8d0e9fa
- SSDEEP 196608:zxbTdsMKdZV0cF28hExgMcgXH6KnNKbC2xlJLJQiLHL7UY8AaEf3yNnq:9XdsldndFdOgMZH6mK22xbLyOHf2Aa61
- TLSH T105C63393A185CA34D221EDB2D02F833D87BAA4761D2535B7AB11ED3DC5BB94133BE244
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.