General
- Target photocraft-0.10.0-windows-x64.msi
- Size 67.5MB
- Sample261024-f2ft2axt4q
- SHA256 96a2a77093d3cdbfe72e989c9fb5bddcdcec94abb0261ad0617b07e893f4542b
- MD5 f7f6f60df95db055e21ecb2af75a9f54
- SHA1 ecda93d8708d11d310374e88aaea145a995ef035
- SHA512 3a1c2347143037569a0d49612baa4f6e87d5746a2c0b11bb1a44ff06d63c839291c5672015679ef37c76be74614c1b6f4b3976ea919ecc18a64da75bffe840b9
- SSDEEP 1572864:E12q4XW7fK8pwTEeVc+YN40Y+lr0LCqsy/S4IaDPLeewuY:E1JdfKsWv66yr2/S/arLeew
- TLSH T106F7336BF7910A9EF0AE817DC2BE5A51EAB53E4C63D0965E0320711BEEB8550F0B7341
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
photocraft-0.10.0-windows-x64.msi
Resource
win10v2004-20260911-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
photocraft-0.10.0-windows-x64.msi
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target photocraft-0.10.0-windows-x64.msi
- Size 67.5MB
- SHA256 96a2a77093d3cdbfe72e989c9fb5bddcdcec94abb0261ad0617b07e893f4542b
- MD5 f7f6f60df95db055e21ecb2af75a9f54
- SHA1 ecda93d8708d11d310374e88aaea145a995ef035
- SHA512 3a1c2347143037569a0d49612baa4f6e87d5746a2c0b11bb1a44ff06d63c839291c5672015679ef37c76be74614c1b6f4b3976ea919ecc18a64da75bffe840b9
- SSDEEP 1572864:E12q4XW7fK8pwTEeVc+YN40Y+lr0LCqsy/S4IaDPLeewuY:E1JdfKsWv66yr2/S/arLeew
- TLSH T106F7336BF7910A9EF0AE817DC2BE5A51EAB53E4C63D0965E0320711BEEB8550F0B7341
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.