General
- Target GoNavi-dev-a0d90fa-Windows-Amd64-Installer.msi
- Size 26.9MB
- Sample261102-vbc3sabw2w
- SHA256 28101588832b45d2f3feb29a7831f10a6199aed0a0311314e206e087ebf3b397
- MD5 e2a39cb484f71d0fea860f141896440b
- SHA1 0b4501409f255c64de09f1f74e76c3b356734804
- SHA512 4a5b356e32c8f90910fa32d8d2ca515031b5d06a6dd0ef756c38d6f8422fe81ee47dc6f454b14fa3241d45b9c5cd857861972c29103fcedfa47afbb1ef229a15
- SSDEEP 786432:PnmaEWR8+f+cDroWACnSjHXh1LL5YKe/64xJc:PWn+f+gfArX3LiPE
- TLSH T1BE5733177C848938C5578F7196F58B094B877C242B605D6B323CB75AEAF36F82A385E0
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
GoNavi-dev-a0d90fa-Windows-Amd64-Installer.msi
Resource
win10v2004-20260911-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
GoNavi-dev-a0d90fa-Windows-Amd64-Installer.msi
Resource
win11ltsc2024-20260911-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target GoNavi-dev-a0d90fa-Windows-Amd64-Installer.msi
- Size 26.9MB
- SHA256 28101588832b45d2f3feb29a7831f10a6199aed0a0311314e206e087ebf3b397
- MD5 e2a39cb484f71d0fea860f141896440b
- SHA1 0b4501409f255c64de09f1f74e76c3b356734804
- SHA512 4a5b356e32c8f90910fa32d8d2ca515031b5d06a6dd0ef756c38d6f8422fe81ee47dc6f454b14fa3241d45b9c5cd857861972c29103fcedfa47afbb1ef229a15
- SSDEEP 786432:PnmaEWR8+f+cDroWACnSjHXh1LL5YKe/64xJc:PWn+f+gfArX3LiPE
- TLSH T1BE5733177C848938C5578F7196F58B094B877C242B605D6B323CB75AEAF36F82A385E0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Loads dropped DLL
-
Modifies file permissions
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.