General
- Target wireguard-amd64-1.1.1.msi
- Size 3.1MB
- Sample261023-hdphdazz7r
- SHA256 7bfed60ad61b785c914b38b61555a975488e1d3ec472dbfb2fcdf498fca75242
- MD5 44aac1c2b70a898c3d0f0650b1cf35f7
- SHA1 de4ea0f71f1dbe48324cf3a3db650122e206328d
- SHA512 e2891af37686c2abdf9ff3971b0090c155fa1875b8907996ae3a78a39d54b6f5f49d0e85357eaae966c82015d8a3f43fb1e1fb5d9489e5292433101565ff725d
- SSDEEP 49152:60IViMvJOkkg9wrF5TyIIw+cZlDqfVa1Vrjh9QTAHG9isMZPDF3IaJ2i+AoK+7bo:2ilQ9IFyIf+smVwRuZi/hLQijC7bo
- TLSH T1D5E5234072000BA0DA960BFFD4C9D5B829F5BD281FA0EDB7513AF66037702CE69B5E95
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
wireguard-amd64-1.1.1.msi
Resource
win10v2004-20260911-en
21 signatures
150 seconds
Behavioral task
behavioral2
Sample
wireguard-amd64-1.1.1.msi
Resource
win11ltsc2024-20260911-en
21 signatures
150 seconds
Malware Config
Targets
-
- Target wireguard-amd64-1.1.1.msi
- Size 3.1MB
- SHA256 7bfed60ad61b785c914b38b61555a975488e1d3ec472dbfb2fcdf498fca75242
- MD5 44aac1c2b70a898c3d0f0650b1cf35f7
- SHA1 de4ea0f71f1dbe48324cf3a3db650122e206328d
- SHA512 e2891af37686c2abdf9ff3971b0090c155fa1875b8907996ae3a78a39d54b6f5f49d0e85357eaae966c82015d8a3f43fb1e1fb5d9489e5292433101565ff725d
- SSDEEP 49152:60IViMvJOkkg9wrF5TyIIw+cZlDqfVa1Vrjh9QTAHG9isMZPDF3IaJ2i+AoK+7bo:2ilQ9IFyIf+smVwRuZi/hLQijC7bo
- TLSH T1D5E5234072000BA0DA960BFFD4C9D5B829F5BD281FA0EDB7513AF66037702CE69B5E95
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.