General
- Target vestige_0.2.0_x64_en-US.msi
- Size 22.7MB
- Sample261027-hmfa3ayy6q
- SHA256 7594796de18b49ed16df8b4637bf112c96a095ac01eccb8733d923558797e59d
- MD5 1e21104066aed99c4237bb7c95e65a30
- SHA1 f77eae74846aeff57fa7eed81e6cc1986dc64b06
- SHA512 4481d7ab1829af6a3b07b0405523d1cf9f5a7688962475cf24437dee0e31eedf18b9baf171f670f3b3cbb1cb22ba2cc0e8f11e57fe5b6a621f62c60c32c48f30
- SSDEEP 393216:oqgj+9QpR2HzJnMcFtMiwxE0ov3gZY4ahliAmnQZcfYEcUjsrx3X5np0/bedljJa:oqgcw2TxMcbMW3gZY4ahliAmnwxEEx5C
- TLSH T1C037333B3D15ABE8C0792C353036579706196D081E22AFCBF428BDB9D8F15D22B798D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
vestige_0.2.0_x64_en-US.msi
Resource
win10v2004-20260911-en
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
vestige_0.2.0_x64_en-US.msi
Resource
win11ltsc2024-20260911-en
20 signatures
150 seconds
Malware Config
Targets
-
- Target vestige_0.2.0_x64_en-US.msi
- Size 22.7MB
- SHA256 7594796de18b49ed16df8b4637bf112c96a095ac01eccb8733d923558797e59d
- MD5 1e21104066aed99c4237bb7c95e65a30
- SHA1 f77eae74846aeff57fa7eed81e6cc1986dc64b06
- SHA512 4481d7ab1829af6a3b07b0405523d1cf9f5a7688962475cf24437dee0e31eedf18b9baf171f670f3b3cbb1cb22ba2cc0e8f11e57fe5b6a621f62c60c32c48f30
- SSDEEP 393216:oqgj+9QpR2HzJnMcFtMiwxE0ov3gZY4ahliAmnQZcfYEcUjsrx3X5np0/bedljJa:oqgcw2TxMcbMW3gZY4ahliAmnwxEEx5C
- TLSH T1C037333B3D15ABE8C0792C353036579706196D081E22AFCBF428BDB9D8F15D22B798D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Executes dropped EXE
Loads dropped DLL
Checks whether UAC is enabled
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.