Analysis
- max time kernel
150s - max time network
149s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
16/09/2026, 18:10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Astrub-Legacy-Setup.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
Astrub-Legacy-Setup.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
General
- Target Astrub-Legacy-Setup.exe
- Size 19KB
- Sample260916-wsetdaca42
- SHA256 7b96df1adfe34ecffa89aeb6ecd68922c8e4d70eb89a1f1038a97df36f6e8c29
- MD5 4bdda6463d29cabaaeab9f820c652c75
- SHA1 833f1b54470c833c395ffe1e5141730867650819
- SHA512 bd244855d1c71529ffb42fc0772ce07d923ceb69e17a373e3fcdd52d4a58667f03db110bb045787c4ac3f941fb9ea2324c99fe861ca3447826c7f2af38ad1c02
- SSDEEP 384:CM3vTapValChIrWiBjXNpxQ7xxKDjXHjxnH0e0NfSpnHIA:CM37apVLiBr1Qc0e0NfS5T
- TLSH T12892E50037E8422AE2BF6F7C6EB182440B77B957AA35D79E1994019D0EB3B408D70B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1464 Astrub-Legacy-Setup.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\AstrubLegacy\staging\resources\app\node_modules\google-auth-library\LICENSE
- Size 11KB
- SHA256 cfc7749b96f63bd31c3c42b5c471bf756814053e847c10f3eb003417bc523d30
- MD5 3b83ef96387f14655fc854ddc3c6bd57
- SHA1 2b8b815229aa8a61e483fb4ba0588b8b6c491890
- SHA512 98f6b79b778f7b0a15415bd750c3a8a097d650511cb4ec8115188e115c47053fe700f578895c097051c9bc3dfb6197c2b13a15de203273e1a3218884f86e90e8
- SSDEEP 192:nU6G5KXSD9VYUKhu1JVF9hFGvV/QiGkS594drFjuHYx5dvTrLh3kTSEn7HbHR:U9vlKM1zJlFvmNz5VrlkTS07Ht
- TLSH T11632623FBA48037706C20162BB9764CBF21E903F3B552568354CC1681F6BA6543FB6EA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\AstrubLegacy\staging\resources\app\node_modules\lop\node_modules\underscore\underscore-min.js
- Size 19KB
- SHA256 1e8f79ce8eee1b5b04c6fb9130eae9e9d4ff042d28d82a6a154b36c06dd71dae
- MD5 7b8ac1c0265d262d2a2f8a785854c62d
- SHA1 70c6e48de7f2415cd0bb530acce75e0ee5665d61
- SHA512 d35fbc45dbe0d6433c06ef40253b43872cae6662473a30f5f9fc40f52d6c87703b3724451e9542aade6f4fb26a3310937ffa042483cecd89dcd11f25d39dbe50
- SSDEEP 384:zsEOIhxIEKwfc5uFWT4VSbRTNsaRDNCOuwUyO9FO1lQ+b:7OI/IExc5EWTB9fRNCOu1nPO1+8
- TLSH T1F192A6C83AD2F05A536320BA407F249BF23E6E62A89CAA40D265F0EC7C7555DD137D5C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\AstrubLegacy\staging\resources\app\node_modules\lop\node_modules\underscore\underscore-min.js.map
- Size 33KB
- SHA256 ff4391a6f1ab9e34445a0509f59df6a050f910e2dad1f59f611bb16a4f2359be
- MD5 4c26ecb14b2a410e1632b8f83dced187
- SHA1 fa22a5322b2d68899a079fd1360c0e3d78f8dbd3
- SHA512 f64fc07141535530468bf17c973e9e6ec3f377b8dec2a8d14ff8c73e5caa599551b7bab5d07e5a73066accb824e7b3f2ef4702d5056171fc1907dbb89b31d6b3
- SSDEEP 768:c0/OHPiIDKLX+9dV0iEedjTUOW3YfUT+T1xTlTPdoodbxE7Ev3irP0TF6lZZur:c0/OHPiIDKLX+98eZwOt1Vxiur
- TLSH T13FF231A022BFFCA9456B4FDFFC528524BD95C0DC1774642464ACA5BCA092F39F2F4826
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\AstrubLegacy\staging\resources\app\node_modules\lop\node_modules\underscore\underscore-umd.js
- Size 66KB
- SHA256 586128266de6b7401289f79caa3b3e38d12eda388422c43a1757d347e36b7e61
- MD5 3e3d3c72fbeeebfc2aeb3d332b9e578e
- SHA1 1ec6b2e3cc81a8c3a180d27b878b1b9c0176500e
- SHA512 4dc89bf7c2f5174f939c359e2d86368ebff5a3660f04cca520a42e72c868cd0f543c286a10c076f03a16c6205a573a7a18597e2eec138af824135f35cab7b986
- SSDEEP 1536:6FgPYMtG1NxVbecjNTUtHAJ3l1rGPYB99VA5Cb:fPYMtGDbeUKpAJurCb
- TLSH T17963A65979E331645A437079435FB446E2388023916DE900F49ED6A8AF9183C93FFBEE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\AstrubLegacy\staging\resources\app\node_modules\option\LICENSE
- Size 1KB
- SHA256 6663bbd049205d38a496ccacb412a151980b444627d38de218b3b809aef330f1
- MD5 bc938c5b4e81ab8e5d8c1a209711a7cf
- SHA1 9cf4ea6cc6512f6bb3246ed3564e9f1ba4318738
- SHA512 a0bb358d27595ea34352e2694752437f52ca080923c1d9a43c0e4281a5b24b35937008ed457096aa59bc4a671080ddbeba936fa3c748824ea31c3093c3e8540e
- TLSH T1DA21755B12400BEB8AD616D63992AE84A0CDC03E3F137D041C7BF3586B3B02EE8BB455
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\AstrubLegacy\staging\resources\app\node_modules\side-channel\.eslintignore
- Size 10B
- SHA256 5c5daf48fdf4db42e16c29b5b3de54984bafe0c2ff367a186ca97f1d4ed48290
- MD5 0549babc2213b12c788bfeb5c47cab97
- SHA1 8525adbdf9ac9a497e638cc69cedd64804151830
- SHA512 54b84472aba9dc81d7b5924fb74ed962803d24d463cb58e153f354e35630e04f2613279aff3fba6f0e612f796108ed3da638bd134047d90dda0d775cde2f7306
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\AstrubLegacy\staging\resources\app\node_modules\side-channel\.nycrc
- Size 216B
- SHA256 948366fea3b423a46366326d0bb2e54b08abd1cf0b243678ba6625740c40da5a
- MD5 c2ab942102236f987048d0d84d73d960
- SHA1 95462172699187ac02eaec6074024b26e6d71cff
- SHA512 e36b20c16ceeb090750f3865efc8d7fd983ae4e8b41c30cc3865d2fd4925bf5902627e1f1ed46c0ff2453f076ef9de34be899ef57754b29cd158440071318479
- TLSH T12ED0A710F03A051561DD629C7D4DB057051404A2818A8625AC712260CB78A10104B941
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\AstrubLegacy\staging\resources\app\node_modules\string_decoder\node_modules\safe-buffer\LICENSE
- Size 1KB
- SHA256 c7cc929b57080f4b9d0c6cf57669f0463fc5b39906344dfc8d3bc43426b30eac
- MD5 badd5e91c737e7ffdf10b40c1f907761
- SHA1 07d9563f6153658de124707787ff43f0458ab24a
- SHA512 ef233f8db609b7025e2e027355ee0b5e7b65b537506412ca1a4d95e74f2be2fe284c3a3fa36cb9d85dbd1a35fe650fe14de5b4d93ab071f2024c1fc8cf40730e
- TLSH T10C11861E735507B2189613605579A8C9F12FB25F7E5F1A45146EF340133A4ACC5FB840
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\AstrubLegacy\staging\resources\app\retroclient\clips\artworks\big\1185.swf
- Size 3KB
- SHA256 e3af1a2f18b15aa1a08f17e6cb8dae7307f1b7d8bb8e05af4cd03b85cdab4f47
- MD5 981f2da624eece35b50ae325a1be04b7
- SHA1 69a3c466e1bec97982ce8d750823a5fdda71ebda
- SHA512 cd715f7754a5ed48e6de337c84a4d8f80664f0799b2076c7235d60278ffe8fc53685f9c5e5e0beb5a9a68693a714dd20369922db6170c7c4d5337006cacc5550
- TLSH T14F614C1FF8E67153A390E4365860037E6A66A72A61DB630B520012DC97A2CDFD6B4473
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\AstrubLegacy\staging\resources\app\retroclient\clips\artworks\big\1415.swf
- Size 2KB
- SHA256 0992e9de313124de548669657e5416bb7b7459adcecac3272eca45a168fd96c5
- MD5 535dc033e89cb8274252d1e16f797811
- SHA1 2da0e0c6b6c46c3847e00fa252df872f1ce9e02e
- SHA512 1ac398a5ce5ad4407a48346b73d769cb1ef6f60ec20878e9aa175b5b63022b8e5c328f59ed3dc6a108d7730951cd017064290aaf89af82a93d56108d48cc8950
- TLSH T148416D776527D1B28ACA3C3708B602D4F4D846A39ACC16C7A4CB012C88DC381F6063E7
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\AstrubLegacy\staging\resources\app\retroclient\clips\artworks\big\1418.swf
- Size 2KB
- SHA256 8d4a4c1cdb5b521d0bf0071f80e0f65f4641a8b62106710b46b4fb9235ef9c33
- MD5 2cf10af8b5f0f9e3d6de3d1f27c76678
- SHA1 429b6f2a1048daaf313a32a8fd649d0c629eba41
- SHA512 03a0b48ac5804ac127319519208aef8795ce628ebf429295422f73224b6607a68e2b0af4e08e394553c186fa1c6484d31095c867a8c96820a1b6a38404b745a0
- TLSH T1B9415FD867B8185A70BC51327D870C9E1FDE0880A4788DC617A7E3E619E74260F51F4E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\AstrubLegacy\staging\resources\app\retroclient\clips\artworks\big\1634.swf
- Size 1KB
- SHA256 1eec398af9eefed8d166362425b26ba2bc19b631440093b1f271a088d600b44e
- MD5 57e8271b5287475a13b0c8d45761738e
- SHA1 f1fa1d63909e4bf942ef16d34f294bed2ee6ef9e
- SHA512 48e1b9f0a6be4906a515c739e024ae513a6ea5598526c685be0be32e6a77452192ecf6492a177c7192782e46c6e74af2c9bfec950844165d6bf81eaaa1517113
- TLSH T1C7210A61B4D08FB557D5F4D095F3CEF834D0B2098A31312586F144D24B51AA4B474FE9
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\AstrubLegacy\staging\resources\app\retroclient\clips\items\24\11.swf
- Size 484B
- SHA256 8270369d6c08a2aaee0a278705a292a8adb1088cd2fed50df2b46e3bc0015719
- MD5 541c68bd00ba16504ecde76efb44b264
- SHA1 643c97491ea870abf6a7ca7db4c80a466ed0900a
- SHA512 fdcd3c0cf47d716eea5f17861112e03f1e1b43d2c5de08f7f6ea2c1b54d9ba43a046df7ae3da5ef3d3cc7eecfc20a538bf10036331961a1edbcb8b2d39654c17
- TLSH T1A2F0544F2011242D085F36BA8E84E3E1A774308381088B1BB1E8FCD4A756A8A6262774
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\AstrubLegacy\staging\resources\app\retroclient\clips\items\24\122.swf
- Size 1KB
- SHA256 c87e4ae20bc15aab5010e2d3d38102fd5ab88717b4d08cf57b55676bfa835f14
- MD5 23b64088cb53431a33b96a8611f98896
- SHA1 547b4b6ebb12ab75e88987d49d9a48dd04238b22
- SHA512 cf4044c858f6047be7074271f3247e23393baa6af152d03d71b2584be0cc2b470756a4dae37bfd270df0719ee5b186e038b4db364791c9c39099be4e7c95ab7e
- TLSH T119210A2883108B12CB48D2C371CD99D720FEE000B7096CF49919692EEBD022F1C0E17F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\AstrubLegacy\staging\resources\app\retroclient\clips\items\24\206.swf
- Size 1KB
- SHA256 ea150b1edf774d969e7375b50e5ac670311b588561bd06c97f1de8e425a4eaf6
- MD5 401b8279fe815aad230eb55ffb2c0243
- SHA1 412df1644a4fc8199d725f8f9138ea07fe9f0a44
- SHA512 f16acde4f0a3cf6163600274fd1c48c251aff487b45477e7ee32256b309190e4e3014dfe3264133b0b4557fcbc06abcbfdae1a22528d648080564934f1443097
- TLSH T18F11C67F2B25F892BA9634F24E6A1D8046AE3426800EB401B18BB654A2CB1326C27160
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\AstrubLegacy\staging\resources\app\retroclient\clips\items\24\243.swf
- Size 875B
- SHA256 161bb3c14dde772d80907f240a50366e5760e072d3b0d20de2a3bfdb356d3677
- MD5 afcd8b9c6cce160870e3148929bda19a
- SHA1 ffc47e09eacabda471b2a762c4a111370ce63580
- SHA512 bb8986b34f3874bdc2bc39720c4cc84e2af7fdcfd2628b0a6ac401817c670767d00a4766c2d3c86316fba4ca4502847c89dff483ee007b7ec34a0928b9bf293a
- TLSH T1201196FEDA29485197B8D1745EABCD840713B0061C1A8314EAE6122A25A8ECC138D517
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\AstrubLegacy\staging\resources\app\retroclient\clips\items\24\749.swf
- Size 798B
- SHA256 553fc225beafb5d72f72419839fabd8afc62192562c47ef08a78c4c72521c786
- MD5 9559092ab589b977fa959833272bbfc3
- SHA1 9d1eb52998961190a9139892d9f4413a9176e3df
- SHA512 2b6caa0142354466196e5681e627fd3b1c1ac882779b1245389d9902e0128c7f356ac0113e81aa510466726f31a308a1d03c3ce76eb53481fe82db012d6f0a8f
- TLSH T184018644E72AC65246812DB51C9CB1297028D885C14573886AC4D91CE7182DB5BC321D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\AstrubLegacy\staging\resources\app\retroclient\clips\items\24\752.swf
- Size 848B
- SHA256 413f393a3e2664f64c3f4b513db2cadb284976071eab4fc95968ef79f09377e8
- MD5 d5cfebd75d89de5a76d1501ece5c93e8
- SHA1 a9d8f572850a60a9b3e5b47b5eda55f1c5fdc680
- SHA512 4b71f9ca24c4576bdea30a7772f4588338d002ba5d030c53563cf6c3387f72a7adddadff07f30327ec6a34888087bdb872dbf296c769428af9dd85e265637af4
- TLSH T1E10116731B47C4C5C867E57467FC09722834452A9653FA569CF015FC88663994A4E05D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\AstrubLegacy\staging\resources\app\retroclient\clips\items\24\756.swf
- Size 1KB
- SHA256 9d667224ed1a15697ac28d5c7c5ab2a63bc4c90675240912bad8816a0c991d2c
- MD5 6dc0a6d472e40752f49f888012ac5a25
- SHA1 50ec63f105f22173f9ef67e2a4617d46a9dd0d42
- SHA512 70eb5f579a925c139fc27f3d85c04d54b58a53ec2db9cc638cbc164941d2cce87c8379c248d9505d6e5f5fe7f5fe66eb5814e15473d34f72166328d04ab91ae7
- TLSH T15C21E92476566D32C88E17B13AE422396F9D361B2400D3B6B42D417831CD3CC42E48DA
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\AstrubLegacy\staging\resources\app\retroclient\clips\items\31\24.swf
- Size 2KB
- SHA256 e71d61f62462f0694e5f435d161c4ee360601fbe30aae9f302155eac958859f5
- MD5 73d4214d0c899c2474de99ca32bc8a30
- SHA1 46e83b2c51f06ac75ae2bf12816d510a39db4231
- SHA512 33cc7cfde69d27620f6351511d24a8e22e376435e634fe6ab1ca2bff4ef7de9a588e07fa40d9c770a95c3a3d4b85f4a4be500caed6e9db8d992fc2e7477b8ec8
- TLSH T1CC414CAA8EE198F0BAB9C1F7974309B701EC9B4B558DA25D47001B0256564D40EE1CD8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\AstrubLegacy\staging\resources\app\retroclient\clips\items\31\27.swf
- Size 2KB
- SHA256 a83400133be749158ef99dcd4cbc831ff8820f361ed32034d2c89b248953e05e
- MD5 9e4053531c9b2c92c24a054d97276a47
- SHA1 a0cdc1c2d56c876f289a82e1738200c3e99de7f7
- SHA512 65ad75bf884927a6d8f0b84df1bf2eb8aba30ef8688087cf6d10884d5bbd16230fdf5795ed6280a1fedc6b2631403fa5fdf22916da16bf4e66a8cc564767ef5b
- TLSH T1D8513A403016694F7B927238CC28686422799E762DB85916E5AC9C184F60AF7CA0BBE3
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\AstrubLegacy\staging\resources\app\retroclient\clips\items\35\20.swf
- Size 956B
- SHA256 263ec5e7b9d3eb3dbd4bbbced2939f8f1aaa98aa4afb36037bf1a0b28a14904e
- MD5 9bf69cb38cdbe081bb66b76e646d9dc9
- SHA1 a3dcfd913b17cd0ece42fd1773f44b425ca117af
- SHA512 ecdc78ba1324ffa74bcf9c30ec3b9e2149186a9ad3906312057ff797d2b9e072e50104755d4dcf8c8102a265086c2945f80fbdba821f0960ddfd306816138fb4
- TLSH T15111C824D00D45C4CFFBBB3179764218A6A440317FA83087DAB74BECBB54A6848DE5E8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\AstrubLegacy\staging\resources\app\retroclient\clips\items\35\46.swf
- Size 3KB
- SHA256 0f1d3b45c35f059b7352404878b71ba9892ea66bf3e6508c20e49160a7e31677
- MD5 017017210834824cf581a7671e563267
- SHA1 799a614f778ec5528d6dbd5758c1342fde1785c8
- SHA512 b6432b8c59b7e7ece087569cea8633a7a3a0e0f3f21bd44d507dd35e51f6b87bdef2d327c92001618876840ce8b9d9d202041780c950886d33b754d8cd51613e
- TLSH T14F717D0DD7A0C61BB3082F21E1DC2EAA07C6973114385A17B6E908C700A944BE786D37
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\AstrubLegacy\staging\resources\app\retroclient\clips\items\42\36.swf
- Size 1KB
- SHA256 8cde3078f7b3df48bf8fb4b7c3064bfb88b8c6fde93e41b53ed150839e434703
- MD5 46cbf1ded1577f0af946d5afa45a38c8
- SHA1 19df591350b9daf716e90f123a85f3f340bad97c
- SHA512 b29d228f9b58609abadec4568f8dd00592d9d81ca34aca2586e76bb6fe448f8829c4705d788e201d6c99466447c9f83b9558231470bc96c4a74f590e745ccd29
- TLSH T1B121718A5B8D996A1EE8F439820776D6299448845A355B5AEDDDC20081F02A20E88F2E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\AstrubLegacy\staging\resources\app\retroclient\clips\items\47\48.swf
- Size 1KB
- SHA256 91d00d00f2f636360ee5ee01d1d74a82b6876f48293daf131c68c192112468a0
- MD5 04fe4e3b14db9a86a027fcacb9d7a2e6
- SHA1 56aa556ecbae7520c68b625798792cfb3ca39ef6
- SHA512 742ffa671b75b77ec305a17138d7151707cfdc1bac01906c25a78dd6c4d0129f9a76184a26d5b30f60466ce4a720b2f7c4fa0eac90f69d14c668d39e8e3b42b8
- TLSH T11521D84E0D717F053112ACB088E03A382BD2B4C5B35D6A9F106A4908903E97791F5E73
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\AstrubLegacy\staging\resources\app\retroclient\clips\items\6\718.swf
- Size 676B
- SHA256 aa87715db80ea64f6d56a83f745c29162941c73a467a7aef125c75e5035d876b
- MD5 f9d5b7b6ffa0f8a6ff6a0b6b104fe754
- SHA1 1bde0d33f4eb080e0714966d986cb0dbc740377c
- SHA512 e176baa205a186217b2a527df2c3e67a87c97a6bc0df79205f1533caedda78e6cb0e6ab46963562ecc7902b90de925a55e3daff0a4d8d4ee6f0ea03c72c54fba
- TLSH T14801833439F261E1C38D18F62F27CFC2C038D0E59A978A96216CC2718F9A0513090746
- MD5 SHA1 SHA512 TLSH