General
- Target NoNameSetup.exe
- Size 62.7MB
- Sample261012-s17ycaea45
- SHA256 69e5de352beda05f1964fded3db3e5e039e159f8091116aa286fcb9d029e2400
- MD5 fda156fb4579456208cec5e9caad3afb
- SHA1 ed2eee9299be608afdb1745c05a2410d15e1dd90
- SHA512 24fea4e7d8b928a23d424bf580917001d5f4dadbce1bf79ee14fdce1261c15fa463c34555560f810db12e8067e4f7f27025607b1a3476bc8bf6dfe9e7600d800
- SSDEEP 1572864:McAs7fegpYnrz2/RaCECJuGTvPI47kUJNkL63ve:XAs7mg6n4RYCA83j5N82e
- TLSH T100E7333FE28B743DD06E4A3A75769610947F6620A4134C12A2FCF99CDF21170297EBDA
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
NoNameSetup.exe
Resource
win11-20260911-en
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
NoNameSetup.exe
Resource
win11ltsc2024-20260911-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target NoNameSetup.exe
- Size 62.7MB
- SHA256 69e5de352beda05f1964fded3db3e5e039e159f8091116aa286fcb9d029e2400
- MD5 fda156fb4579456208cec5e9caad3afb
- SHA1 ed2eee9299be608afdb1745c05a2410d15e1dd90
- SHA512 24fea4e7d8b928a23d424bf580917001d5f4dadbce1bf79ee14fdce1261c15fa463c34555560f810db12e8067e4f7f27025607b1a3476bc8bf6dfe9e7600d800
- SSDEEP 1572864:McAs7fegpYnrz2/RaCECJuGTvPI47kUJNkL63ve:XAs7mg6n4RYCA83j5N82e
- TLSH T100E7333FE28B743DD06E4A3A75769610947F6620A4134C12A2FCF99CDF21170297EBDA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks whether UAC is enabled
-
Discovers running processes
Running process information can be used to identify security tools or plan follow-on actions.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2PowerShell
1Windows Command Shell
1