General
- Target balenaEtcher-2.1.9.Setup.exe
- Size 261.5MB
- Sample261023-c9186ahs91
- SHA256 3fa63ea453e75c0338f8f1444b511f38decdd002e17922a910aec5e29b85b751
- MD5 96b455aee6316c00ad7da5bb84e4d0b0
- SHA1 c4156941b16721c135c6611418d04aa2fe215f2a
- SHA512 0d7dc5719b82284269cf0f72afddfb53406b931016eb7c3447579b078fec610827327f82e66e41bcba52f3fd213ff53104a70a5f5ba17bc12e440580079d1b7d
- SSDEEP 6291456:mCxfVtABIkfKHFtBVMPYYCEUcMMZduSEy5pXat96Eaupyx:mCR+ZoFtBVMPYM/daqqecS
- TLSH T11FD83377C05384BEDA24B533C1868A3CB776FE37996E087732463B6844FA1B19136672
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
balenaEtcher-2.1.9.Setup.exe
Resource
win10v2004-20260911-en
20 signatures
150 seconds
Behavioral task
behavioral2
Sample
balenaEtcher-2.1.9.Setup.exe
Resource
win11ltsc2024-20260911-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target balenaEtcher-2.1.9.Setup.exe
- Size 261.5MB
- SHA256 3fa63ea453e75c0338f8f1444b511f38decdd002e17922a910aec5e29b85b751
- MD5 96b455aee6316c00ad7da5bb84e4d0b0
- SHA1 c4156941b16721c135c6611418d04aa2fe215f2a
- SHA512 0d7dc5719b82284269cf0f72afddfb53406b931016eb7c3447579b078fec610827327f82e66e41bcba52f3fd213ff53104a70a5f5ba17bc12e440580079d1b7d
- SSDEEP 6291456:mCxfVtABIkfKHFtBVMPYYCEUcMMZduSEy5pXat96Eaupyx:mCR+ZoFtBVMPYM/daqqecS
- TLSH T11FD83377C05384BEDA24B533C1868A3CB776FE37996E087732463B6844FA1B19136672
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.