General
- Target Set-up_msi_PASSWORD_infected.7z
- Size 2.7MB
- Sample260925-2ablwsxhqa
- SHA256 e94611713562645db8cc15618e2310b2801e219085bf839de50db71f968e618a
- MD5 74446daf8c5e3e58ced7a17d226eaf42
- SHA1 3d04d3841d5cb7df415415363df86db2f29deaf2
- SHA512 9ef527e7da10bcd615f3592fcde561de1af05a546a78ebda12d3365aa6e1b63310b3b64b6eb2c806909d7d0495846fef9db5d98c897af226fc4bdb8e9931fbb4
- SSDEEP 49152:J8cRbT2K+Xtsq/C254+yC3LeLCHWuG3Jl469fgELV+4TGCoV+iGJW+SMiYKTCi:J8s2K6aeCv+yy/W7Je697bx5BiYKP
- TLSH T184D53347DB984458E59ED482CF1CACFA503D27428BE1878AFEAC7C98B4F497C15C9827
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Set-up.msi
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
Set-up.msi
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target Set-up.msi
- Size 3.7MB
- SHA256 41531aae204ec10a846290d57b1bc9abd4391e12c7dbe27b782525757589d47f
- MD5 4226776e86e6f853d50a11d3b485b48e
- SHA1 972cf950cc3f9c8db9c96b5850e0938c275f0da3
- SHA512 25b621b125d9a4807f98b1eea8bd1457150338256df3196711479a66bc8635eef036b76f3773ee79f4d48c3b3c1115b2b9c8ffd882cc93833409f93e4a6e18c6
- SSDEEP 49152:z6mif+rX+QoKVUIAHEeIajljdEAZw9T1Qjr5hiPAwAKMVWKdFPpte/styvX:7RUIAHESZwFmXjiH1MVWiFPCEtyvX
- TLSH T1B3062317F6816BE7E223573584398370A3766CA943B28F2B1481327DDD363658DAACF4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Event Triggered Execution
1Installer Packages
1Process Injection
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1