General
- Target incy-windows-setup.exe
- Size 118.7MB
- Sample261024-vx2m9sv1cx
- SHA256 e05167282226f263f589ef10288b826f327e7f511c50d939a3e2519d5c1ad3b7
- MD5 7fddc9b9d4ff4c684bb0974ba0799cd5
- SHA1 024ec0fc2eea5912d1823a3844b07fe4d7a70102
- SHA512 c2172cd096ff284714ee0489f8e63f6adf00fed59343547e08439617632628d8b7d0ee157cdf1af9289b5f5305a9a11361d55976e25a42348e7820a14438f768
- SSDEEP 3145728:GV8iDUkGvP+ttqLquvXRque8q5/bmZX87pBUz2hGr:BU+WhOq5/dbUz2hE
- TLSH T1C558333B068BB5B9E5BB523C79718701D577A61259628F20AFF0C94CDF220701D3EA9B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
incy-windows-setup.exe
Resource
win11ltsc2024-20260911-en
23 signatures
150 seconds
Malware Config
Targets
-
- Target incy-windows-setup.exe
- Size 118.7MB
- SHA256 e05167282226f263f589ef10288b826f327e7f511c50d939a3e2519d5c1ad3b7
- MD5 7fddc9b9d4ff4c684bb0974ba0799cd5
- SHA1 024ec0fc2eea5912d1823a3844b07fe4d7a70102
- SHA512 c2172cd096ff284714ee0489f8e63f6adf00fed59343547e08439617632628d8b7d0ee157cdf1af9289b5f5305a9a11361d55976e25a42348e7820a14438f768
- SSDEEP 3145728:GV8iDUkGvP+ttqLquvXRque8q5/bmZX87pBUz2hGr:BU+WhOq5/dbUz2hE
- TLSH T1C558333B068BB5B9E5BB523C79718701D577A61259628F20AFF0C94CDF220701D3EA9B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Modifies file permissions
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.