General
- Target photocraft-0.7.0-windows-x64.msi
- Size 61.6MB
- Sample261012-sdlrlasz9l
- SHA256 af959a169ba0b93bdcec4df0e9dfdbac365b7759d3d74b06c3f8f96ed45ff9a0
- MD5 89d779ecead7cb91d4118c3db93f81f8
- SHA1 9aeb411c568790dde22d1c6492c3308c8741b795
- SHA512 677aa8f1b5c1586e1d034c5bb29b9bea940973c47e13d9cd278af6fbd1150c4e621d802e1f40703d306d37d3cd3a8e1d8399792c47e652f51c36e3e7fe8471bf
- SSDEEP 1572864:BN780imfsj5VA4bTWzZdWR53I7oIY1opJ:BO0wrb+TM54mopJ
- TLSH T1C8E73386B7C01468F55F053EC6BFA61587BA3D0C63D0A08E96683117DE7A760E5FB388
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
photocraft-0.7.0-windows-x64.msi
Resource
win10v2004-20260911-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
photocraft-0.7.0-windows-x64.msi
Resource
win11ltsc2024-20260911-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target photocraft-0.7.0-windows-x64.msi
- Size 61.6MB
- SHA256 af959a169ba0b93bdcec4df0e9dfdbac365b7759d3d74b06c3f8f96ed45ff9a0
- MD5 89d779ecead7cb91d4118c3db93f81f8
- SHA1 9aeb411c568790dde22d1c6492c3308c8741b795
- SHA512 677aa8f1b5c1586e1d034c5bb29b9bea940973c47e13d9cd278af6fbd1150c4e621d802e1f40703d306d37d3cd3a8e1d8399792c47e652f51c36e3e7fe8471bf
- SSDEEP 1572864:BN780imfsj5VA4bTWzZdWR53I7oIY1opJ:BO0wrb+TM54mopJ
- TLSH T1C8E73386B7C01468F55F053EC6BFA61587BA3D0C63D0A08E96683117DE7A760E5FB388
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.