General
- Target Deskland-Setup.exe
- Size 260.4MB
- Sample261113-pyvcpaby5t
- SHA256 5f7b00728e6196d45337b1271f11e07ba7991f67cf941150a94d8d3ceba63248
- MD5 61afba3af36cc513c6232f53badadc2c
- SHA1 eeb735f70d9c7d57389f50788740e18d1ae272aa
- SHA512 cadc768163c85f8e943c87580363d856b5ab7c411f6f5076c5a12b572c2ec775578b5cc7ac3327a079a5041ab460ceb13388ad37d60200bce7a50aa978e37681
- SSDEEP 6291456:WSL8uRUdJ/HJB4C4r9Te3TE8jz91cunaJkAW7:WSL8E+ZHJBN2CE8jzkunaOb
- TLSH T129D8334D09457087F18582FD83A76E814E2EF88BE03F252FF164D70A27876D496CA99F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Deskland-Setup.exe
Resource
win11-20260911-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target Deskland-Setup.exe
- Size 260.4MB
- SHA256 5f7b00728e6196d45337b1271f11e07ba7991f67cf941150a94d8d3ceba63248
- MD5 61afba3af36cc513c6232f53badadc2c
- SHA1 eeb735f70d9c7d57389f50788740e18d1ae272aa
- SHA512 cadc768163c85f8e943c87580363d856b5ab7c411f6f5076c5a12b572c2ec775578b5cc7ac3327a079a5041ab460ceb13388ad37d60200bce7a50aa978e37681
- SSDEEP 6291456:WSL8uRUdJ/HJB4C4r9Te3TE8jz91cunaJkAW7:WSL8E+ZHJBN2CE8jzkunaOb
- TLSH T129D8334D09457087F18582FD83A76E814E2EF88BE03F252FF164D70A27876D496CA99F
- MD5 SHA1 SHA512 SSDEEP TLSH
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
Executes dropped EXE
Loads dropped DLL
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Checks whether UAC is enabled
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1