General
- Target RoALT-Setup-1.0.2.exe
- Size 7.1MB
- Sample261107-3ry9ysge74
- SHA256 948f65dada60b4404ed66bb7c1626fdd562e3ebacde7740754eac0607c1c06a9
- MD5 89d4b824f284bb9873ecc2458d7406a6
- SHA1 ea8a706fc947d5f58cb2749a89afc3d6e092dea9
- SHA512 f263cca7496b3e0b9777798fcf601c91c4b716fbf3cf5f91b0f2e3d2223d26ea6121afd278a017ab90e0ddc4ce185b52c343ce83da9f84b7af71b5e9a3c3251e
- SSDEEP 196608:sD6ET1e/jCgRcrF4dgwE71ywJM7GsSYZF9pR:sD6Y1y+gR/Y1ywJGbSg9pR
- TLSH T18876233FB28B653EE06A5A3A7A72E210583B7A6165138C06DBF4C84CCF155B01D3E797
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
RoALT-Setup-1.0.2.exe
Resource
win10v2004-20260911-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
RoALT-Setup-1.0.2.exe
Resource
win11ltsc2024-20260911-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target RoALT-Setup-1.0.2.exe
- Size 7.1MB
- SHA256 948f65dada60b4404ed66bb7c1626fdd562e3ebacde7740754eac0607c1c06a9
- MD5 89d4b824f284bb9873ecc2458d7406a6
- SHA1 ea8a706fc947d5f58cb2749a89afc3d6e092dea9
- SHA512 f263cca7496b3e0b9777798fcf601c91c4b716fbf3cf5f91b0f2e3d2223d26ea6121afd278a017ab90e0ddc4ce185b52c343ce83da9f84b7af71b5e9a3c3251e
- SSDEEP 196608:sD6ET1e/jCgRcrF4dgwE71ywJM7GsSYZF9pR:sD6Y1y+gR/Y1ywJGbSg9pR
- TLSH T18876233FB28B653EE06A5A3A7A72E210583B7A6165138C06DBF4C84CCF155B01D3E797
- MD5 SHA1 SHA512 SSDEEP TLSH
Executes dropped EXE
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Checks whether UAC is enabled
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
2Install Root Certificate
2