General
- Target ArbortextIsoDraw.msi
- Size 11.0MB
- Sample261027-dcgc6ace58
- SHA256 23d5b5be0af9294eb162c9940e894036f6df57a1b7e24375afb7155a50bde3b8
- MD5 0338e07dbd898a6f4741eb103d8da3f3
- SHA1 01d180c29be01326db79414450d539b4145bd423
- SHA512 568092ab48c9ad7bbf122b2ef09a1103df6ed52ff174f2ddf30db8c0476840050287459d2273dfa5c6d4e6fe8f850a6d356eaf5e470ad13d74f78b6930322ca4
- SSDEEP 98304:xvxb18fiEzqkjLCcNYKIGUbNSmr5jRWVCEw0/c817l23Alep:PyvO8jHUJfH
- TLSH T143C629B88CD293C0D2908378C863F8DDEC777815E1B5545E62ABF19F4A7FA11F6AA110
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
ArbortextIsoDraw.msi
Resource
win11ltsc2024-20260911-en
6 signatures
300 seconds
Malware Config
Targets
-
- Target ArbortextIsoDraw.msi
- Size 11.0MB
- SHA256 23d5b5be0af9294eb162c9940e894036f6df57a1b7e24375afb7155a50bde3b8
- MD5 0338e07dbd898a6f4741eb103d8da3f3
- SHA1 01d180c29be01326db79414450d539b4145bd423
- SHA512 568092ab48c9ad7bbf122b2ef09a1103df6ed52ff174f2ddf30db8c0476840050287459d2273dfa5c6d4e6fe8f850a6d356eaf5e470ad13d74f78b6930322ca4
- SSDEEP 98304:xvxb18fiEzqkjLCcNYKIGUbNSmr5jRWVCEw0/c817l23Alep:PyvO8jHUJfH
- TLSH T143C629B88CD293C0D2908378C863F8DDEC777815E1B5545E62ABF19F4A7FA11F6AA110
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.