General
- Target Setup.exe
- Size 1.0MB
- Sample261030-lpnl1aeb38
- SHA256 d4f6f3e40c446c474656ee6d7298f5fa501bba7367c6df54c87910d420263676
- MD5 f193da36e568b68ad414bc49a9182212
- SHA1 711a887f93b6805e5c3ed298eaf6ca78671a4cf0
- SHA512 fb5da91d71e0b593e4bd441c96484f53ba6a3aee5c45f2ae0fc9d0342494cbc8c7996ec07a4ee3dbdba5b3dc048f4cd95a794264b28dbf6b4efdef5eaf66d444
- SSDEEP 24576:XdGIvCzvxyLjHj7eqyf/DltwLF768qc57og75sS/:tJO43DX0tcrqID5sS/
- TLSH T1CD353C829B0474A8D3A587F211DC49540E3EEC3A5D8AB4BA318834DB6975D8F0EFC677
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Setup.exe
Resource
win10v2004-20260911-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
Setup.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target Setup.exe
- Size 1.0MB
- SHA256 d4f6f3e40c446c474656ee6d7298f5fa501bba7367c6df54c87910d420263676
- MD5 f193da36e568b68ad414bc49a9182212
- SHA1 711a887f93b6805e5c3ed298eaf6ca78671a4cf0
- SHA512 fb5da91d71e0b593e4bd441c96484f53ba6a3aee5c45f2ae0fc9d0342494cbc8c7996ec07a4ee3dbdba5b3dc048f4cd95a794264b28dbf6b4efdef5eaf66d444
- SSDEEP 24576:XdGIvCzvxyLjHj7eqyf/DltwLF768qc57og75sS/:tJO43DX0tcrqID5sS/
- TLSH T1CD353C829B0474A8D3A587F211DC49540E3EEC3A5D8AB4BA318834DB6975D8F0EFC677
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Suspicious use of SetThreadContext