General
- Target hwi64_848.zip
- Size 30.1MB
- Sample260930-184vna1sav
- SHA256 b98922126da433516da9a41960cf5161a73e52d61b864606db6d2e75e1bd0c21
- MD5 2aeb142fe99ad88ad39177d81e66bd0d
- SHA1 187d7a9d5854bdac1305801019f161fa8f4aac06
- SHA512 86efe04f460f221026af84c5191d4544a1157df419e9c12d4b031b0dfef3fe794d933be9f3588ec97c02a981e4e9d79111b48a45969534f46eb68b5809111fcf
- SSDEEP 786432:mh0g2t7/FPRdXO9MCoKHwbEyQQtSMNqcAupx:5g2t7BRd2jRyQuNqcAuf
- TLSH T15C6733647CB669CEF917293208AA0619F5FCBAAAF04CDFE30B108478AD4F1551E6CD5C
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Setup/DeviceSettingsProvider.dll
Resource
win10v2004-20260911-en
9 signatures
900 seconds
Behavioral task
behavioral2
Sample
Setup/DeviceSettingsProvider.dll
Resource
win11-20260911-en
9 signatures
900 seconds
Behavioral task
behavioral3
Sample
setup.exe
Resource
win10v2004-20260911-en
8 signatures
900 seconds
Malware Config
Targets
-
- Target Setup/DeviceSettingsProvider.dll
- Size 20.3MB
- SHA256 b9158588502001a24bba1b476c356355c21c20fca043a3a95f5d4973d6ba54dc
- MD5 111a2f1ec1600018558cf2bfce4be80c
- SHA1 f763f0326a247f388337d05d39d0927dc5599e33
- SHA512 ccbd689e2a815abdfe0af20e8163641237b2adc60683831494d674b2ba508bd42a499e3fc41d62cabad930d5d3144e42f835e02ae16d46e07d931adc320dabbc
- SSDEEP 393216:tQClqmu54q93xHHmGMm31oq8Zf2jHq7WeDLXKJUemr:Nlqmu5BPHBd1ls7SWsu
- TLSH T157273319BA6A4EEFE413C87A85902A16F4FC79254308EFFB5BD441791317B61273C2AC
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Executes dropped EXE
-
Loads dropped DLL
-
- Target setup.exe
- Size 33.5MB
- SHA256 b60a4f1a970c22bcf82616b68ded58330314b77ceffa3763603e95b04d755ab5
- MD5 34d5da293c28ea8dbd17904027216fce
- SHA1 7073666f5db46067e129783991015a06f04290e0
- SHA512 a0902dd03b518b698264f6aadc5b6a3aab1d1e556ea7be038dea5fe46a2ab369b72323ff3a4d0027dcb01a16a34e52692d30534aff2c7932ccdd0968a8ee06c2
- SSDEEP 393216:pcLq1CrXb4cGNUeUBFIajwYW15QVYcSHnl:pcLq1Y7FVwxQVYj
- TLSH T12D77D52F17AA19ADD4B6A3BED5051F80A03FB055076246CF079141F67CAEADC8FFA520
- MD5 SHA1 SHA512 SSDEEP TLSH