General
- Target FallenWare-Setup.exe
- Size 28.0MB
- Sample261030-m989waysbx
- SHA256 e01fe52c0f5ac304b0a8e5b27d2c09bb276c975b562c99722dbaa78fc67cd294
- MD5 f111c2f36c9e2a5385f9667d32f2366d
- SHA1 f74ebc368cba9b17946c1db7a6905a04f9280c24
- SHA512 3c79bd32499a530ba4365831c30479d0fa02fb322c5f74f8e1be77ddcb6368337bbaf9bc67b43c7222b35822f4d2937224328896367a8b75f6362fff9b337e76
- SSDEEP 393216:VTvAXV8AjemBdVV/33ktGl/opPtMca4yFySVb/+Sz41W8nRxPnlPtZRyjzo2oi40:BhAjnb0wKMc9SJ/pM17Z/RyQ2oh318kG
- TLSH T1A157333BB29F613EE46D557A3BB1A721543B6610A8174C46EBF4C49CCF280B10D7EB86
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
FallenWare-Setup.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
FallenWare-Setup.exe
Resource
win11ltsc2024-20260911-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target FallenWare-Setup.exe
- Size 28.0MB
- SHA256 e01fe52c0f5ac304b0a8e5b27d2c09bb276c975b562c99722dbaa78fc67cd294
- MD5 f111c2f36c9e2a5385f9667d32f2366d
- SHA1 f74ebc368cba9b17946c1db7a6905a04f9280c24
- SHA512 3c79bd32499a530ba4365831c30479d0fa02fb322c5f74f8e1be77ddcb6368337bbaf9bc67b43c7222b35822f4d2937224328896367a8b75f6362fff9b337e76
- SSDEEP 393216:VTvAXV8AjemBdVV/33ktGl/opPtMca4yFySVb/+Sz41W8nRxPnlPtZRyjzo2oi40:BhAjnb0wKMc9SJ/pM17Z/RyQ2oh318kG
- TLSH T1A157333BB29F613EE46D557A3BB1A721543B6610A8174C46EBF4C49CCF280B10D7EB86
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks whether UAC is enabled