General
- Target distroav-6.2.2-windows-x64-Installer.exe
- Size 3.2MB
- Sample261107-wvbvhady9v
- SHA256 86087f8ac1f51886794e2a903e64e36341aca0a463a5278b88b2c760a06a6f7e
- MD5 4a374264f0d7ea085ffefcd9a3df1999
- SHA1 8395e314f8a31d7b806cdaca79ba2a99e16ac9ef
- SHA512 424baaeb60b962466d1221fb96a812d3bc7476e8d64cff6efdfea71fec0d17091ceeb621182e90de7e4a49e8c48d13e9d62e88f422dfae387d94bb679e16d057
- SSDEEP 49152:CuI2h6bFXobM3PerIHMvp/iO9vzXHVukzq8XE/5lodc:C5O6RYgmcHMDvL1ud5+c
- TLSH T1C8F5E03BB24B753EE06A16B539B2D134443BAE61A8124C1696E4EC8FFF354701D3E687
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
distroav-6.2.2-windows-x64-Installer.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
distroav-6.2.2-windows-x64-Installer.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target distroav-6.2.2-windows-x64-Installer.exe
- Size 3.2MB
- SHA256 86087f8ac1f51886794e2a903e64e36341aca0a463a5278b88b2c760a06a6f7e
- MD5 4a374264f0d7ea085ffefcd9a3df1999
- SHA1 8395e314f8a31d7b806cdaca79ba2a99e16ac9ef
- SHA512 424baaeb60b962466d1221fb96a812d3bc7476e8d64cff6efdfea71fec0d17091ceeb621182e90de7e4a49e8c48d13e9d62e88f422dfae387d94bb679e16d057
- SSDEEP 49152:CuI2h6bFXobM3PerIHMvp/iO9vzXHVukzq8XE/5lodc:C5O6RYgmcHMDvL1ud5+c
- TLSH T1C8F5E03BB24B753EE06A16B539B2D134443BAE61A8124C1696E4EC8FFF354701D3E687
- MD5 SHA1 SHA512 SSDEEP TLSH
Modifies Windows Firewall
Executes dropped EXE
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1