General
- Target RingToolSetup.exe
- Size 68.6MB
- Sample261101-3md38ady7s
- SHA256 774b6264ad6b04ede7565635f2bb7c8947245e345f5e47b1201626e92a364a35
- MD5 233c4e1fc4694c2af73a45ce6adb772e
- SHA1 8bb02ced3933925bd169a3bc25f2297937e372fd
- SHA512 9fd6ab334d77ef2ee579d7c9b5bdcf98ae159a5ef068942ae30b8ab72519fd8629ed063e1d563ee7e34c623dce79f502ff0b5f40202b68c7862c68713f13b77f
- SSDEEP 1572864:y+VsaAOePovO/nw1lGchRLjxKEQzSm51bAta4+gmH7r/Q+:y+Wa/vO/w1QARpzQe61bN4+Tbc+
- TLSH T1ABF72356E2FD00E8E57AC0BCC6975517EBB23445133497EB66A48A692F33BE06E3D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
RingToolSetup.exe
Resource
win10v2004-20260911-en
4 signatures
900 seconds
Behavioral task
behavioral2
Sample
RingToolSetup.exe
Resource
win11ltsc2024-20260911-en
16 signatures
900 seconds
Malware Config
Targets
-
- Target RingToolSetup.exe
- Size 68.6MB
- SHA256 774b6264ad6b04ede7565635f2bb7c8947245e345f5e47b1201626e92a364a35
- MD5 233c4e1fc4694c2af73a45ce6adb772e
- SHA1 8bb02ced3933925bd169a3bc25f2297937e372fd
- SHA512 9fd6ab334d77ef2ee579d7c9b5bdcf98ae159a5ef068942ae30b8ab72519fd8629ed063e1d563ee7e34c623dce79f502ff0b5f40202b68c7862c68713f13b77f
- SSDEEP 1572864:y+VsaAOePovO/nw1lGchRLjxKEQzSm51bAta4+gmH7r/Q+:y+Wa/vO/w1QARpzQe61bN4+Tbc+
- TLSH T1ABF72356E2FD00E8E57AC0BCC6975517EBB23445133497EB66A48A692F33BE06E3D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Loads dropped DLL
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.