General
- Target MakuTweaker 5.8.7.exe
- Size 77.9MB
- Sample260928-nmfjqaae49
- SHA256 99506687544a521f802e31c8774f28343c0187b63879d6f45b5e9ffc1e09476e
- MD5 9e9ba57741f02aebdbbd877362d1d482
- SHA1 9aa6fe2050101b5fd918e67e02e6566b3e0ac938
- SHA512 aeab7687c8705c3a0a6bd05863a676995ef501b36384f3901529b72fad6f7a22d106158ba11304b69c669583327e469e04bc6698041fa3e8289bec0ed1bcf28c
- SSDEEP 1572864:a5nHEoeeCw1rhWG+tf6fj4ulm3Uc6tf4qLUVNNBqFgWp1o0/Fe:uExQP+ZyjNLQuUVNmFHfo09e
- TLSH T1AB082356E2FD00E8D97AC0BCC6575527E7B23459133097EB61A48A692F37BE0AE3D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
MakuTweaker 5.8.7.exe
Resource
win10v2004-20260911-en
7 signatures
600 seconds
Behavioral task
behavioral2
Sample
MakuTweaker 5.8.7.exe
Resource
win11ltsc2024-20260911-en
19 signatures
600 seconds
Malware Config
Targets
-
- Target MakuTweaker 5.8.7.exe
- Size 77.9MB
- SHA256 99506687544a521f802e31c8774f28343c0187b63879d6f45b5e9ffc1e09476e
- MD5 9e9ba57741f02aebdbbd877362d1d482
- SHA1 9aa6fe2050101b5fd918e67e02e6566b3e0ac938
- SHA512 aeab7687c8705c3a0a6bd05863a676995ef501b36384f3901529b72fad6f7a22d106158ba11304b69c669583327e469e04bc6698041fa3e8289bec0ed1bcf28c
- SSDEEP 1572864:a5nHEoeeCw1rhWG+tf6fj4ulm3Uc6tf4qLUVNNBqFgWp1o0/Fe:uExQP+ZyjNLQuUVNmFHfo09e
- TLSH T1AB082356E2FD00E8D97AC0BCC6575527E7B23459133097EB61A48A692F37BE0AE3D310
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Loads dropped DLL
-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.