General
- Target easetup_icongnghe.com.msi
- Size 160.5MB
- Sample261023-3pb2ms1wbt
- SHA256 72b9dbd2a47bd3ec5edab40a1f302a0ee10a4333534ea3c05e136d1bf9db86b5
- MD5 d0ec9a114a1bf1ccfdc2fb7987844806
- SHA1 520f2ba50e2e8d35de53d671c30b1cdf33e85c9e
- SHA512 74ccafc5fad4eeaeec32df69095ead3c94b9067e4354606bf3abdea908ea730fc2ad6125c71664d4dab10f8b9396253d12c6ac654076c03eb3aab74b9b00c4ce
- SSDEEP 3145728:mm+LNkcigGDj/rec3Z3HZ262aB+c5MM391jBaGIS++jkoOu45:mDNADj/reQlZrN+cbBlbFjnOu6
- TLSH T1F388333367D00D72C268567A169777C19FF11DF31FA0228B1B39B60E8D7B2D829E6186
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
easetup_icongnghe.com.msi
Resource
win11ltsc2024-20260911-en
21 signatures
150 seconds
Malware Config
Targets
-
- Target easetup_icongnghe.com.msi
- Size 160.5MB
- SHA256 72b9dbd2a47bd3ec5edab40a1f302a0ee10a4333534ea3c05e136d1bf9db86b5
- MD5 d0ec9a114a1bf1ccfdc2fb7987844806
- SHA1 520f2ba50e2e8d35de53d671c30b1cdf33e85c9e
- SHA512 74ccafc5fad4eeaeec32df69095ead3c94b9067e4354606bf3abdea908ea730fc2ad6125c71664d4dab10f8b9396253d12c6ac654076c03eb3aab74b9b00c4ce
- SSDEEP 3145728:mm+LNkcigGDj/rec3Z3HZ262aB+c5MM391jBaGIS++jkoOu45:mDNADj/reQlZrN+cbBlbFjnOu6
- TLSH T1F388333367D00D72C268567A169777C19FF11DF31FA0228B1B39B60E8D7B2D829E6186
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Identifies Wine through registry keys
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Defense Evasion
System Binary Proxy Execution
1Msiexec
1Virtualization/Sandbox Evasion
1