Analysis

  • max time kernel
    150s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    16/09/2026, 18:10

General

  • Target
    Astrub-Legacy-Setup.exe
  • Size 19KB
  • Sample260916-wsetdaca42
  • SHA256 7b96df1adfe34ecffa89aeb6ecd68922c8e4d70eb89a1f1038a97df36f6e8c29
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Astrub-Legacy-Setup.exe
    "C:\Users\Admin\AppData\Local\Temp\Astrub-Legacy-Setup.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1464

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        LICENSE

        • Path C:\Users\Admin\AppData\Local\AstrubLegacy\staging\resources\app\node_modules\google-auth-library\LICENSE
        • Size 11KB
        • SHA256 cfc7749b96f63bd31c3c42b5c471bf756814053e847c10f3eb003417bc523d30
        • MD5 SHA1 SHA512 SSDEEP TLSH

        underscore-min.js

        • Path C:\Users\Admin\AppData\Local\AstrubLegacy\staging\resources\app\node_modules\lop\node_modules\underscore\underscore-min.js
        • Size 19KB
        • SHA256 1e8f79ce8eee1b5b04c6fb9130eae9e9d4ff042d28d82a6a154b36c06dd71dae
        • MD5 SHA1 SHA512 SSDEEP TLSH

        underscore-min.js.map

        • Path C:\Users\Admin\AppData\Local\AstrubLegacy\staging\resources\app\node_modules\lop\node_modules\underscore\underscore-min.js.map
        • Size 33KB
        • SHA256 ff4391a6f1ab9e34445a0509f59df6a050f910e2dad1f59f611bb16a4f2359be
        • MD5 SHA1 SHA512 SSDEEP TLSH

        underscore-umd.js

        • Path C:\Users\Admin\AppData\Local\AstrubLegacy\staging\resources\app\node_modules\lop\node_modules\underscore\underscore-umd.js
        • Size 66KB
        • SHA256 586128266de6b7401289f79caa3b3e38d12eda388422c43a1757d347e36b7e61
        • MD5 SHA1 SHA512 SSDEEP TLSH

        LICENSE

        • Path C:\Users\Admin\AppData\Local\AstrubLegacy\staging\resources\app\node_modules\option\LICENSE
        • Size 1KB
        • SHA256 6663bbd049205d38a496ccacb412a151980b444627d38de218b3b809aef330f1
        • MD5 SHA1 SHA512 TLSH

        .eslintignore

        • Path C:\Users\Admin\AppData\Local\AstrubLegacy\staging\resources\app\node_modules\side-channel\.eslintignore
        • Size 10B
        • SHA256 5c5daf48fdf4db42e16c29b5b3de54984bafe0c2ff367a186ca97f1d4ed48290
        • MD5 SHA1 SHA512

        .nycrc

        • Path C:\Users\Admin\AppData\Local\AstrubLegacy\staging\resources\app\node_modules\side-channel\.nycrc
        • Size 216B
        • SHA256 948366fea3b423a46366326d0bb2e54b08abd1cf0b243678ba6625740c40da5a
        • MD5 SHA1 SHA512 TLSH

        LICENSE

        • Path C:\Users\Admin\AppData\Local\AstrubLegacy\staging\resources\app\node_modules\string_decoder\node_modules\safe-buffer\LICENSE
        • Size 1KB
        • SHA256 c7cc929b57080f4b9d0c6cf57669f0463fc5b39906344dfc8d3bc43426b30eac
        • MD5 SHA1 SHA512 TLSH

        1185.swf

        • Path C:\Users\Admin\AppData\Local\AstrubLegacy\staging\resources\app\retroclient\clips\artworks\big\1185.swf
        • Size 3KB
        • SHA256 e3af1a2f18b15aa1a08f17e6cb8dae7307f1b7d8bb8e05af4cd03b85cdab4f47
        • MD5 SHA1 SHA512 TLSH

        1415.swf

        • Path C:\Users\Admin\AppData\Local\AstrubLegacy\staging\resources\app\retroclient\clips\artworks\big\1415.swf
        • Size 2KB
        • SHA256 0992e9de313124de548669657e5416bb7b7459adcecac3272eca45a168fd96c5
        • MD5 SHA1 SHA512 TLSH

        1418.swf

        • Path C:\Users\Admin\AppData\Local\AstrubLegacy\staging\resources\app\retroclient\clips\artworks\big\1418.swf
        • Size 2KB
        • SHA256 8d4a4c1cdb5b521d0bf0071f80e0f65f4641a8b62106710b46b4fb9235ef9c33
        • MD5 SHA1 SHA512 TLSH

        1634.swf

        • Path C:\Users\Admin\AppData\Local\AstrubLegacy\staging\resources\app\retroclient\clips\artworks\big\1634.swf
        • Size 1KB
        • SHA256 1eec398af9eefed8d166362425b26ba2bc19b631440093b1f271a088d600b44e
        • MD5 SHA1 SHA512 TLSH

        11.swf

        • Path C:\Users\Admin\AppData\Local\AstrubLegacy\staging\resources\app\retroclient\clips\items\24\11.swf
        • Size 484B
        • SHA256 8270369d6c08a2aaee0a278705a292a8adb1088cd2fed50df2b46e3bc0015719
        • MD5 SHA1 SHA512 TLSH

        122.swf

        • Path C:\Users\Admin\AppData\Local\AstrubLegacy\staging\resources\app\retroclient\clips\items\24\122.swf
        • Size 1KB
        • SHA256 c87e4ae20bc15aab5010e2d3d38102fd5ab88717b4d08cf57b55676bfa835f14
        • MD5 SHA1 SHA512 TLSH

        206.swf

        • Path C:\Users\Admin\AppData\Local\AstrubLegacy\staging\resources\app\retroclient\clips\items\24\206.swf
        • Size 1KB
        • SHA256 ea150b1edf774d969e7375b50e5ac670311b588561bd06c97f1de8e425a4eaf6
        • MD5 SHA1 SHA512 TLSH

        243.swf

        • Path C:\Users\Admin\AppData\Local\AstrubLegacy\staging\resources\app\retroclient\clips\items\24\243.swf
        • Size 875B
        • SHA256 161bb3c14dde772d80907f240a50366e5760e072d3b0d20de2a3bfdb356d3677
        • MD5 SHA1 SHA512 TLSH

        749.swf

        • Path C:\Users\Admin\AppData\Local\AstrubLegacy\staging\resources\app\retroclient\clips\items\24\749.swf
        • Size 798B
        • SHA256 553fc225beafb5d72f72419839fabd8afc62192562c47ef08a78c4c72521c786
        • MD5 SHA1 SHA512 TLSH

        752.swf

        • Path C:\Users\Admin\AppData\Local\AstrubLegacy\staging\resources\app\retroclient\clips\items\24\752.swf
        • Size 848B
        • SHA256 413f393a3e2664f64c3f4b513db2cadb284976071eab4fc95968ef79f09377e8
        • MD5 SHA1 SHA512 TLSH

        756.swf

        • Path C:\Users\Admin\AppData\Local\AstrubLegacy\staging\resources\app\retroclient\clips\items\24\756.swf
        • Size 1KB
        • SHA256 9d667224ed1a15697ac28d5c7c5ab2a63bc4c90675240912bad8816a0c991d2c
        • MD5 SHA1 SHA512 TLSH

        24.swf

        • Path C:\Users\Admin\AppData\Local\AstrubLegacy\staging\resources\app\retroclient\clips\items\31\24.swf
        • Size 2KB
        • SHA256 e71d61f62462f0694e5f435d161c4ee360601fbe30aae9f302155eac958859f5
        • MD5 SHA1 SHA512 TLSH

        27.swf

        • Path C:\Users\Admin\AppData\Local\AstrubLegacy\staging\resources\app\retroclient\clips\items\31\27.swf
        • Size 2KB
        • SHA256 a83400133be749158ef99dcd4cbc831ff8820f361ed32034d2c89b248953e05e
        • MD5 SHA1 SHA512 TLSH

        20.swf

        • Path C:\Users\Admin\AppData\Local\AstrubLegacy\staging\resources\app\retroclient\clips\items\35\20.swf
        • Size 956B
        • SHA256 263ec5e7b9d3eb3dbd4bbbced2939f8f1aaa98aa4afb36037bf1a0b28a14904e
        • MD5 SHA1 SHA512 TLSH

        46.swf

        • Path C:\Users\Admin\AppData\Local\AstrubLegacy\staging\resources\app\retroclient\clips\items\35\46.swf
        • Size 3KB
        • SHA256 0f1d3b45c35f059b7352404878b71ba9892ea66bf3e6508c20e49160a7e31677
        • MD5 SHA1 SHA512 TLSH

        36.swf

        • Path C:\Users\Admin\AppData\Local\AstrubLegacy\staging\resources\app\retroclient\clips\items\42\36.swf
        • Size 1KB
        • SHA256 8cde3078f7b3df48bf8fb4b7c3064bfb88b8c6fde93e41b53ed150839e434703
        • MD5 SHA1 SHA512 TLSH

        48.swf

        • Path C:\Users\Admin\AppData\Local\AstrubLegacy\staging\resources\app\retroclient\clips\items\47\48.swf
        • Size 1KB
        • SHA256 91d00d00f2f636360ee5ee01d1d74a82b6876f48293daf131c68c192112468a0
        • MD5 SHA1 SHA512 TLSH

        718.swf

        • Path C:\Users\Admin\AppData\Local\AstrubLegacy\staging\resources\app\retroclient\clips\items\6\718.swf
        • Size 676B
        • SHA256 aa87715db80ea64f6d56a83f745c29162941c73a467a7aef125c75e5035d876b
        • MD5 SHA1 SHA512 TLSH

        memory/1464-4-0x000000001ECB0000-0x000000001F1D8000-memory.dmp

        memory/1464-8-0x000000001B320000-0x000000001B32A000-memory.dmp

        memory/1464-7-0x000000001B330000-0x000000001B342000-memory.dmp

        memory/1464-0-0x0000000000C30000-0x0000000000C3C000-memory.dmp

        memory/1464-3-0x000000001C3B0000-0x000000001C3C0000-memory.dmp

        memory/1464-2-0x000000001C3C0000-0x000000001C582000-memory.dmp

        memory/1464-1-0x000000001C3B0000-0x000000001C3C0000-memory.dmp