General
- Target Set-up.msi
- Size 3.7MB
- Sample261104-jfcf9sty9n
- SHA256 9d1163db3ea71ea7029d01b95930e8f40260dbf2359178da1921a67e22dcac5e
- MD5 68da5c53f39048804724d492e6a85089
- SHA1 44a4459b4ae8dac6f204b3057d461d50e8192cd0
- SHA512 2e9a41997de0c1102c3c2d5eca669d3f0336f20a3facc32b61cc7c502d6e6d23eea653a78402473323bb9da73892ee9a6a5814825d6ec5f1fbe2c7b309c334d8
- SSDEEP 49152:XdmXxxfrZ2kxVbVgt7W6O/ll2gD3stwENfL6ls0wLYr:qvbVgtOP2gbstwENfCwE
- TLSH T106063342B7C95AD2E0726A3514260BC8A73EEC309B665E3B2AD4313DED317925F27CD1
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Set-up.msi
Resource
win10v2004-20260911-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
Set-up.msi
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target Set-up.msi
- Size 3.7MB
- SHA256 9d1163db3ea71ea7029d01b95930e8f40260dbf2359178da1921a67e22dcac5e
- MD5 68da5c53f39048804724d492e6a85089
- SHA1 44a4459b4ae8dac6f204b3057d461d50e8192cd0
- SHA512 2e9a41997de0c1102c3c2d5eca669d3f0336f20a3facc32b61cc7c502d6e6d23eea653a78402473323bb9da73892ee9a6a5814825d6ec5f1fbe2c7b309c334d8
- SSDEEP 49152:XdmXxxfrZ2kxVbVgt7W6O/ll2gD3stwENfL6ls0wLYr:qvbVgtOP2gbstwENfCwE
- TLSH T106063342B7C95AD2E0726A3514260BC8A73EEC309B665E3B2AD4313DED317925F27CD1
- MD5 SHA1 SHA512 SSDEEP TLSH
Executes dropped EXE
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Event Triggered Execution
1Installer Packages
1Process Injection
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1