General
- Target Cirava-Setup-1.2.5.exe
- Size 23.9MB
- Sample261107-2te4esst9r
- SHA256 9ab2b5d0fc17f2ce5c0b07e35c291b38bda75f3d8cbac28ea983c4a51f605a07
- MD5 b2f77fcd0ec115da1cb96c1cf24f9870
- SHA1 287f42b22e67dafc3cc904a35daf3557d98d953a
- SHA512 d8303cd8566e3e7a9ada6ac072b3dc2e8a738abe2cd7988f539382724a955271af0d662441c7fca8fe4bafaf94dbe2b7a074bd11dfd776b73430f7f5293fcfa7
- SSDEEP 393216:3iLypkMHuNF77opgkNBiNFsYHNYvgONfInJ5Ujdo0fZ2yvdGDs/f3WpGIPYfIhr2:VpkLAEduzKnJ53CgodGg333shr2
- TLSH T10947333FF28B653DF46A5E363572A210593B6A6065138C5697F4C88CDF290702E3EAD3
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Cirava-Setup-1.2.5.exe
Resource
win10v2004-20260911-en
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
Cirava-Setup-1.2.5.exe
Resource
win11ltsc2024-20260911-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target Cirava-Setup-1.2.5.exe
- Size 23.9MB
- SHA256 9ab2b5d0fc17f2ce5c0b07e35c291b38bda75f3d8cbac28ea983c4a51f605a07
- MD5 b2f77fcd0ec115da1cb96c1cf24f9870
- SHA1 287f42b22e67dafc3cc904a35daf3557d98d953a
- SHA512 d8303cd8566e3e7a9ada6ac072b3dc2e8a738abe2cd7988f539382724a955271af0d662441c7fca8fe4bafaf94dbe2b7a074bd11dfd776b73430f7f5293fcfa7
- SSDEEP 393216:3iLypkMHuNF77opgkNBiNFsYHNYvgONfInJ5Ujdo0fZ2yvdGDs/f3WpGIPYfIhr2:VpkLAEduzKnJ53CgodGg333shr2
- TLSH T10947333FF28B653DF46A5E363572A210593B6A6065138C5697F4C88CDF290702E3EAD3
- MD5 SHA1 SHA512 SSDEEP TLSH
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
Executes dropped EXE
Loads dropped DLL
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Checks whether UAC is enabled
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1