Overview
overview
7Static
static
3Push Hack ...er.exe
windows10-2004-x64
7Push Hack ...er.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...up.exe
windows10-2004-x64
6$PLUGINSDI...up.exe
windows11-ltsc_2024-x64
6Push Hack ...er.exe
windows10-2004-x64
6Push Hack ...er.exe
windows11-ltsc_2024-x64
6Push Hack ...er.exe
windows10-2004-x64
7Push Hack ...er.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...up.exe
windows10-2004-x64
6$PLUGINSDI...up.exe
windows11-ltsc_2024-x64
6Push Hack ...er.exe
windows10-2004-x64
Push Hack ...er.exe
windows11-ltsc_2024-x64
Analysis
- max time kernel
149s - max time network
140s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
27/10/2026, 00:59
Static task
static1
Behavioral task
behavioral1
Sample
Push Hack Installer-amd64-installer.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
Push Hack Installer-amd64-installer.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/webview2bootstrapper/MicrosoftEdgeWebview2Setup.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/webview2bootstrapper/MicrosoftEdgeWebview2Setup.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
Push Hack Installer.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
Push Hack Installer.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
Push Hack Installer-arm64-installer.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
Push Hack Installer-arm64-installer.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral17
Sample
$PLUGINSDIR/webview2bootstrapper/MicrosoftEdgeWebview2Setup.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral18
Sample
$PLUGINSDIR/webview2bootstrapper/MicrosoftEdgeWebview2Setup.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral19
Sample
Push Hack Installer.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral20
Sample
Push Hack Installer.exe
Resource
win11ltsc2024-20260911-en
General
- Target Push Hack Installer-amd64-installer.exe
- Size 12.1MB
- Sample261027-bb6wbacd34
- SHA256 c93d6d53c31aeb4e4630685a73646c999fa67e02e1997ab5e7fd8b3c21cd80ad
- MD5 f60cba86e0ce4cdea047ad6dc6a98236
- SHA1 ba180b623070e4536b36895f68c45ff036e6e5d6
- SHA512 e3482112fddd50f71f4c83e7e76b176003952dbfc1cb88e4f65532948123520231037ce0d06154e9caff267c122c2c33909aebdaf0ffd741eb03a1a32f5911de
- SSDEEP 393216:QZO87ZTWoTsiSjLq5rvkG+z6a/Ssrvjmvq/mRbVbndk6JX:QZpBTGQvcV7Adj
- TLSH T13BD63324F0308AD8F88A54303DF768546A939517C3DFC66378932B175B66CE6A7B4B38
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Loads dropped DLL 3 IoCs
pid Process 3948 Push Hack Installer-amd64-installer.exe 3948 Push Hack Installer-amd64-installer.exe 3948 Push Hack Installer-amd64-installer.exe - Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Drops file in Program Files directory 2 IoCs
description ioc Process File created C:\Program Files\push-hack\Push Hack Installer\Push Hack Installer.exe Push Hack Installer-amd64-installer.exe File created C:\Program Files\push-hack\Push Hack Installer\uninstall.exe Push Hack Installer-amd64-installer.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Push Hack Installer-amd64-installer.exe
Processes
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Program Files\push-hack\Push Hack Installer\Push Hack Installer.exe
- Size 26.1MB
- SHA256 0ac45b97afd4aaf744a5efac7005336d54a038e1634cdcbe8d04c5f2f171ef09
- MD5 1133fa882ba1be7d007536a961835ff0
- SHA1 0fc56aa494104400ce4544179387602ef81e676d
- SHA512 acf0fee7b1d1c6bfd667da1e29ca2359fae5f2e5ca1a29b3ea67c6d1a988211e25c017dd939905847e08288c67e7066f309ceca4a3e6f823244eae058885915f
- SSDEEP 196608:1USsLBNEgbGpcD/balZDRQvfxQciBvtF15ISFTV9ZzcDJsJUUadl:1DMBZm6GlsvycKF15NFvNs2edl
- TLSH T159575A47ECA555E9C0AEC1308A729663BB717C894B3023D72B50F6282F77BD0ADB9750
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsdA6EA.tmp\InstallOptions.dll
- Size 15KB
- SHA256 a778d3d9855d5c28a0ffcbc7d21c33a99beef4bf9587a7d7a65c65745801a29c
- MD5 ca28ddf732c58331d10b840600b2e519
- SHA1 e18db6b0e858b2f3e6d1cb89df1ed973710f1f34
- SHA512 2d833fc745e8d7036a2ca500bc0a8274e61338382c4437700510b0361661202fdba36c1ade6fef7591ca4b591568cebbccdcb03830e32b00364eb3705d35420e
- SSDEEP 192:EMGQtZkTktEQUrJaZfuyCnSmUsv3sY7L7cW8Y6Q86QvoTT611929WtshLAzgSrX8:EMNt+4t7uJalUnGesY7Lt8nCT6/Yosa
- TLSH T102624D1137D598B3E2E62A797EF377138FA5F722A4428E0BC7332E4638565846D78311
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsdA6EA.tmp\System.dll
- Size 12KB
- SHA256 afe032f942e2ed0bf7494ec08ba813f5739fb522c640bde81d30ecaf9f894432
- MD5 564e01f2c6edfb8475573e1b809cb5eb
- SHA1 5d767e8f685449d86cd8d16c83a814ef8f7d6264
- SHA512 67486f8e996b29688cfb5a57ae4a7604fa0892ba0eeccdd55f514ca4bd9b79a6fe42bfab4fc85156c2258ae66539bdd9bb36a8b5f7f944f3007c2421f244c95c
- SSDEEP 192:rjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZ80QPi:X/Qlt7wiij/lMRv/9V4b8r
- TLSH T1FD426C1297B089F2F551493419667F2A6FBEAC5D27F405A3CFE304C63D212DB9879243
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsdA6EA.tmp\ioSpecial.ini
- Size 1KB
- SHA256 bf4b6611c3373e24326d2609afc0930061ed13bb0d46fceeeca0e3a77e291ce4
- MD5 7bedf03127cd7bc2334c3e498ab950e1
- SHA1 07326939d240e8d119528b1e9659985aecf8549f
- SHA512 4ea2b7bc3ed60edbc1fa5fc76d1bd82ee22101e2057fa0ad67de1b99308c9dd963d586c075d448d550a71c7c91884f20de0120d6dd002ada034ad6bd15176b6d
- TLSH T16D219D537BF81114F2BBBB54FEB580758B3A7C56AC39D60D41C0090E09E5A808973BAB
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsdA6EA.tmp\ioSpecial.ini
- Size 1KB
- SHA256 75139b563d43a2f22dd36d4e4275e4a566f31ad748696a72931384ed4d813aae
- MD5 0e788fb644db87966f060d5a857cdc2c
- SHA1 a2e27676af17356ed734af77c7890bc94482b330
- SHA512 9d517e0b32556d2670a0dba5286a536638ad702882882a38e76cead7ecf9dbd176df3030d07657d5bc7826ee7403725b6ee61173f67282361ef9b029bae03070
- TLSH T1B31151137EFD5414E2BBFB48FFF5807557297852582DD91E91C00A0E48E5A808973BEB
- MD5 SHA1 SHA512 TLSH