General
- Target WorkshopDL.2.0.4_installer.exe
- Size 1.8MB
- Sample260910-w7p8nafm3w
- SHA256 8b179746a7ff085a7882d191c37e770aa373cd02e17eec7244885aaaddddfc2a
- MD5 53659871f7d05fc4d266f86c2f645e06
- SHA1 87dfa73cf2a158bce3c2315dd18f3424d91dd06b
- SHA512 d6cc41545f51ea22e0db556450155f4500b350e9585e2b84a8e7f2cc11a21278f633aa93e9a4d1884c9252f96d6f28633c3409ddcded7c59e5645621f1a95a26
- SSDEEP 49152:pJl/usLaXNzd8PI4bWzEvZzImrekgXY5NfR+:vNusaXZdSI4bWQ0Y5NfR+
- TLSH T11585234DB6E4C97FCEB91470162C7AF9373ACE341814CB539348E815BDA2709E91B29E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
WorkshopDL.2.0.4_installer.exe
Resource
win10v2004-20260513-fr
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
WorkshopDL.2.0.4_installer.exe
Resource
win11ltsc2024-20260709-fr
1 signatures
150 seconds
Malware Config
Targets
-
- Target WorkshopDL.2.0.4_installer.exe
- Size 1.8MB
- SHA256 8b179746a7ff085a7882d191c37e770aa373cd02e17eec7244885aaaddddfc2a
- MD5 53659871f7d05fc4d266f86c2f645e06
- SHA1 87dfa73cf2a158bce3c2315dd18f3424d91dd06b
- SHA512 d6cc41545f51ea22e0db556450155f4500b350e9585e2b84a8e7f2cc11a21278f633aa93e9a4d1884c9252f96d6f28633c3409ddcded7c59e5645621f1a95a26
- SSDEEP 49152:pJl/usLaXNzd8PI4bWzEvZzImrekgXY5NfR+:vNusaXZdSI4bWQ0Y5NfR+
- TLSH T11585234DB6E4C97FCEB91470162C7AF9373ACE341814CB539348E815BDA2709E91B29E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.