5ae95b2c346fcf461977959e3ead7fbc116cde95823db661105c7192091bf1f0 | Triage™

Login
Reports

Overview

overview

8

Static

static

3

Hotel-Setup.exe

windows10-2004-x64

7

Hotel-Setup.exe

windows11-ltsc_2024-x64

8

Sharing

Copy URL Twitter E-mail

General

Target
Hotel-Setup.exe
Size 14.6MB
Sample261002-w3dn3aff97
SHA256 5ae95b2c346fcf461977959e3ead7fbc116cde95823db661105c7192091bf1f0
MD5 656400636a0942019802aa74205d2a8e
SHA1 f1a214a1e54b275d08da4693fc98f41004d2f671
SHA512 7339d020917b6096eb1e22a8adbc97473ec77e7826b5529f11ee391cb52f335e41b6fbaf6caa0df263931f56d9a7474daaaf19146584e8c6f82611a4faf480f3
SSDEEP 393216:UKddzY6fNkTObcPDBWqwuvnnEMkjsB2fQiH+npWbb9ij7zQXMf:TzVmTObcrBnwuvnEm2fQu+gtUUU
TLSH
T1FAF63323B3C7613FE07E4A364A76D252553BB66129238CA797F808ACCE155D01E3FB16
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion discovery installer persistence privilege_escalation

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

Hotel-Setup.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

discovery installer

Behavioral task

behavioral2

Sample

Hotel-Setup.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

12 signatures

150 seconds

defense_evasion discovery installer persistence privilege_escalation

Malware Config

Targets

- Target
  Hotel-Setup.exe
- Size 14.6MB
- SHA256 5ae95b2c346fcf461977959e3ead7fbc116cde95823db661105c7192091bf1f0
- MD5 656400636a0942019802aa74205d2a8e
- SHA1 f1a214a1e54b275d08da4693fc98f41004d2f671
- SHA512 7339d020917b6096eb1e22a8adbc97473ec77e7826b5529f11ee391cb52f335e41b6fbaf6caa0df263931f56d9a7474daaaf19146584e8c6f82611a4faf480f3
- SSDEEP 393216:UKddzY6fNkTObcPDBWqwuvnnEMkjsB2fQiH+npWbb9ij7zQXMf:TzVmTObcrBnwuvnEm2fQu+gtUUU
- TLSH
  T1FAF63323B3C7613FE07E4A364A76D252553BB66129238CA797F808ACCE155D01E3FB16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery installer defense_evasion persistence privilege_escalation
- Modifies Windows Firewall
  defense_evasion
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryinstaller

behavioral2

defense_evasiondiscoveryinstallerpersistenceprivilege_escalation

© 2018-2026

Terms | Privacy