General
- Target weaver-windows-x86_64.msi
- Size 23.5MB
- Sample261110-kpcdaseb63
- SHA256 29665934078a5f54ed4c98bf5f91f509d85e297824ce495833a0932b053bc20e
- MD5 127d6f002324e5cdf925b99f248cb799
- SHA1 eb2d76c5e1a532bb8dd17cfa43b3f25474af02b0
- SHA512 cec58ec91d4cbf2ebdf0f1d8d8a6ade124d6fdde9260a4439ffd86c9c6410f444a7c5829d862c92b37ede189cf99d6af8d306bd26b1020ecd1bc9659dc0e1ff9
- SSDEEP 393216:Cpg1B1tozqTsNbuYtQQmDffYvjGOi/wsXmmOkTwcsG3MbuXMDsqJLEs4z1Mwmsp3:CSDabuYtd0fqjRJrUFrXMDscs1
- TLSH T1FC47330E6EA59A35E30D5C324245AB1DC5D98DF1399BE12A9380BF6D237A8E38307F45
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
weaver-windows-x86_64.msi
Resource
win10v2004-20260911-en
20 signatures
150 seconds
Behavioral task
behavioral2
Sample
weaver-windows-x86_64.msi
Resource
win11ltsc2024-20260911-en
21 signatures
150 seconds
Malware Config
Targets
-
- Target weaver-windows-x86_64.msi
- Size 23.5MB
- SHA256 29665934078a5f54ed4c98bf5f91f509d85e297824ce495833a0932b053bc20e
- MD5 127d6f002324e5cdf925b99f248cb799
- SHA1 eb2d76c5e1a532bb8dd17cfa43b3f25474af02b0
- SHA512 cec58ec91d4cbf2ebdf0f1d8d8a6ade124d6fdde9260a4439ffd86c9c6410f444a7c5829d862c92b37ede189cf99d6af8d306bd26b1020ecd1bc9659dc0e1ff9
- SSDEEP 393216:Cpg1B1tozqTsNbuYtQQmDffYvjGOi/wsXmmOkTwcsG3MbuXMDsqJLEs4z1Mwmsp3:CSDabuYtd0fqjRJrUFrXMDscs1
- TLSH T1FC47330E6EA59A35E30D5C324245AB1DC5D98DF1399BE12A9380BF6D237A8E38307F45
- MD5 SHA1 SHA512 SSDEEP TLSH
Executes dropped EXE
Adds Run key to start application
Checks whether UAC is enabled
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Installer Packages
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Installer Packages
1