General
- Target 2293-_Forza_Horizon_6_Premium_Edition_v4_Archive_latest_1549.zip
- Size 787.8MB
- Sample261027-nwptratvgx
- SHA256 34633d34040390f4238b7d29ad14e3ff50902053cf8b70f91a2ec77c41061a8b
- MD5 449046ba59b3435a94b77ebf24494ad9
- SHA1 be12d7b8dcfc0e9426a762e33376bce0935a8439
- SHA512 ad9680aecbca02c51542c172c4a8376186ceee58cb8c16cfc4937d898b3b952f373ba29bff1de28986e29934c514bb79cf4b86e0c08880ecba05f8ad2677bc0c
- SSDEEP 786432:c9dNDuaouU1O4ZX0vXihnPYz5SQH0TZZol:c98O8kviVgND0Tw
- TLSH T128893304CE28E097FB9336B474B0D157C57F50B532DFA1A9B9AA31F49D8AD006F2D90A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Setup.exe
Resource
win11-20260911-it
15 signatures
900 seconds
Malware Config
Targets
-
- Target Setup.exe
- Size 102KB
- SHA256 7123e1514b939b165985560057fe3c761440a9fff9783a3b84e861fd2888d4ab
- MD5 0323998e0e85eca5fd90d9f8ecbbd6c2
- SHA1 56dc080f728d7a276495d6a4371670f9ea71519b
- SHA512 2b56c210d6c690cef89ca03563cec186576c50f6b1b60b287afd46a14cc5c9dfce31dd458066098951a79daf3b367fdb0787d3bdc74fbd8f69425877f263b0e5
- SSDEEP 3072:53Yj+8JlFCumUbyJlKP8HRvkduTK5Nrh2o9Dj0fmoQ:1Q+IFCumUGekHRvEuO3go9kfnQ
- TLSH T167A3F206BB1615BEE922803EEA970666D7B0FB6217514CC71211A2301FB7FC19E379E5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Indirect Command Execution
Adversaries may abuse utilities that allow for command execution to bypass security restrictions that limit the use of command-line interpreters.
-
Loads dropped DLL
-
Suspicious use of NtSetInformationThreadHideFromDebugger
MITRE ATT&CK Enterprise v16
Defense Evasion
Debugger Evasion
1Indirect Command Execution
1Subvert Trust Controls
1SIP and Trust Provider Hijacking
1