General
- Target 506W_Launcher_Setup_1.1.0.exe
- Size 30.1MB
- Sample261001-vdedmazerf
- SHA256 6f26cd9c992d38201cbb390f2cdf3db41b9ca2bf54f3ee4ec81bf971fb612e46
- MD5 1b6c61197601207b08f28db8f97595c0
- SHA1 b0a5a99c36231c55c00f62c698f07b262a4bfcd7
- SHA512 5d4ccfb92560758dfd8c14d8c63b2ee204a85014ac35647593f3e758ff86f65a0a2b049772f2555b143573d9587a61c1c837d23c03294c4a1a709bbb3f572c1e
- SSDEEP 786432:aSq2IaKh3o019sq9FnqhrXt7Mjf8blByowjzYsXOJpy:Nq2IaKC0p+205Vwj5OC
- TLSH T14B67333FE18F353EE42A093939B6A625683BB76169174C16D6E4CC8CCB254701C3FB96
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
506W_Launcher_Setup_1.1.0.exe
Resource
win10v2004-20260911-en
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
506W_Launcher_Setup_1.1.0.exe
Resource
win11ltsc2024-20260911-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 506W_Launcher_Setup_1.1.0.exe
- Size 30.1MB
- SHA256 6f26cd9c992d38201cbb390f2cdf3db41b9ca2bf54f3ee4ec81bf971fb612e46
- MD5 1b6c61197601207b08f28db8f97595c0
- SHA1 b0a5a99c36231c55c00f62c698f07b262a4bfcd7
- SHA512 5d4ccfb92560758dfd8c14d8c63b2ee204a85014ac35647593f3e758ff86f65a0a2b049772f2555b143573d9587a61c1c837d23c03294c4a1a709bbb3f572c1e
- SSDEEP 786432:aSq2IaKh3o019sq9FnqhrXt7Mjf8blByowjzYsXOJpy:Nq2IaKC0p+205Vwj5OC
- TLSH T14B67333FE18F353EE42A093939B6A625683BB76169174C16D6E4CC8CCB254701C3FB96
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.