General
- Target Maddox_1.0.0_x64_en-US.msi
- Size 9.7MB
- Sample261113-weq99ayx8m
- SHA256 bf6cca830fa3b2f14332abd4a78f442eead17245267d1d4cc855daff13f16aea
- MD5 a84d91e7c82be6dd6b56759cb7a9567a
- SHA1 12c35a175764587dadcf3d72648271b58852f275
- SHA512 fc93ef4d8e436d857523c1890eced80cf4c40c02c88ce082ee1a3d67fa713d9501ce45e4acce9ff4262bf6c87bd93995c48b500f323fb46270b73e90ca04373b
- SSDEEP 196608:jYmB4eyZR4vmq4hFk/QD43PH/8hDFTnlw7stTkV28ayU+RHBDQOWK0ECZqgc:JvmqkkYD4ffg5lwYtI28ayhpQOP0EP
- TLSH T10AA63357BF809B32C9450EB20837A7A186796C34254D84C2BA59F32DEEF65D0CB7B9C1
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Maddox_1.0.0_x64_en-US.msi
Resource
win10v2004-20260911-en
22 signatures
150 seconds
Behavioral task
behavioral2
Sample
Maddox_1.0.0_x64_en-US.msi
Resource
win11ltsc2024-20260911-en
23 signatures
150 seconds
Malware Config
Targets
-
- Target Maddox_1.0.0_x64_en-US.msi
- Size 9.7MB
- SHA256 bf6cca830fa3b2f14332abd4a78f442eead17245267d1d4cc855daff13f16aea
- MD5 a84d91e7c82be6dd6b56759cb7a9567a
- SHA1 12c35a175764587dadcf3d72648271b58852f275
- SHA512 fc93ef4d8e436d857523c1890eced80cf4c40c02c88ce082ee1a3d67fa713d9501ce45e4acce9ff4262bf6c87bd93995c48b500f323fb46270b73e90ca04373b
- SSDEEP 196608:jYmB4eyZR4vmq4hFk/QD43PH/8hDFTnlw7stTkV28ayU+RHBDQOWK0ECZqgc:JvmqkkYD4ffg5lwYtI28ayhpQOP0EP
- TLSH T10AA63357BF809B32C9450EB20837A7A186796C34254D84C2BA59F32DEEF65D0CB7B9C1
- MD5 SHA1 SHA512 SSDEEP TLSH
Executes dropped EXE
Loads dropped DLL
Checks whether UAC is enabled
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
2Install Root Certificate
2System Binary Proxy Execution
1Msiexec
1