General
- Target VARQOO-RDP-Guard-Setup-1.1.1.exe
- Size 2.2MB
- Sample260925-tmw5csvye1
- SHA256 0b749e8cecc2af7322eac65aaf6aa76b0731f6e845e8a04af5585b90341481cf
- MD5 425ff3351eafc1d4bc5bd3e8fb78d012
- SHA1 ddc1f50344804dea4a72aa98b4e3ffc6559f9a4a
- SHA512 f7cf339e9211ece8fc8eb0ec798ad40baa0e4cffd7149732f027d757055ed8a03a400ba2141550aa6eda634a26cf78719a47e6c7ea64aeea7f21f739998b9962
- SSDEEP 49152:DuI2h4QIb2k9I9wUGSDTuzlSjee3w6EugBqC2S:D5O4QIikWhGS/uzlSR3w6c
- TLSH T166B5D03BA24F653DE42E163579F2A224443F7FA169124C1A96E0E44CEF354B42E3E787
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
VARQOO-RDP-Guard-Setup-1.1.1.exe
Resource
win10v2004-20260911-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
VARQOO-RDP-Guard-Setup-1.1.1.exe
Resource
win11ltsc2024-20260911-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target VARQOO-RDP-Guard-Setup-1.1.1.exe
- Size 2.2MB
- SHA256 0b749e8cecc2af7322eac65aaf6aa76b0731f6e845e8a04af5585b90341481cf
- MD5 425ff3351eafc1d4bc5bd3e8fb78d012
- SHA1 ddc1f50344804dea4a72aa98b4e3ffc6559f9a4a
- SHA512 f7cf339e9211ece8fc8eb0ec798ad40baa0e4cffd7149732f027d757055ed8a03a400ba2141550aa6eda634a26cf78719a47e6c7ea64aeea7f21f739998b9962
- SSDEEP 49152:DuI2h4QIb2k9I9wUGSDTuzlSjee3w6EugBqC2S:D5O4QIikWhGS/uzlSR3w6c
- TLSH T166B5D03BA24F653DE42E163579F2A224443F7FA169124C1A96E0E44CEF354B42E3E787
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Creates new service(s)
-
Executes dropped EXE
-
Loads dropped DLL
-
Stops running service(s)
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1System Services
2Service Execution
2