Analysis
- max time kernel
150s - max time network
129s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
29/10/2026, 19:01
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Setup.exe
Resource
win10v2004-20260911-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
Setup.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
General
- Target Setup.exe
- Size 69.2MB
- Sample261029-xpb4rasvat
- SHA256 c981ab52338a41faafcf697302d6055052a51043f3ef496a7ec8d3a730eb94e7
- MD5 bafecab4fb748b6ee536a93f1dbf21e6
- SHA1 961476322e0d2597345c518a803f2fb4f8785e9e
- SHA512 01f058ce59c688d7eec088a760a1b8e3bf5e54bca501acbf75ed5fada45e39fd1ab163af405f4d896cdf97836173974188036e80301c9b9b6dea558e20859658
- SSDEEP 1572864:m2hARkYPR2QJx2/EpOwI51MFZJWt02o7gQ+Uov:ncBp2QT2sKnNo7GUE
- TLSH T16AF7F19B72A101E8D476C07C8A53C527FBB1781657315BDB22A8A69A1F37BF06D3B310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 4864 Setup.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4864 Setup.exe - Suspicious use of FindShellTrayWindow 2 IoCs
pid Process 4864 Setup.exe 4864 Setup.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 4864 Setup.exe 4864 Setup.exe