General
- Target setup.msi
- Size 57.5MB
- Sample241226-phq1bsvrep
- SHA256 404e2b3ecd486cf7a533790edbe22ab145c767f8c413a95570b0cc41c3b46143
- MD5 99c84a1c2cf1acd2ddeb621561789acb
- SHA1 c5efa38a646b02ea2263dacd5a17586295c6fcd3
- SHA512 c0d72a1189f09e9f67400e93ccd797618f9cc17f3a67c91f6e38ff99399f3a51452661bf133227d4991071ba1a402916bf46c049ba501ce69a80276f546ec5af
- SSDEEP 786432:zGZojVmrjV7eIAtehOTZ0oZ4sdUuzt/NCaY2ksCo:zGcVmrjV7eIvhOTZ5RjVCa1tP
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
setup.msi
Resource
win7-20240729-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.msi
Resource
win10v2004-20241007-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target setup.msi
- Size 57.5MB
- SHA256 404e2b3ecd486cf7a533790edbe22ab145c767f8c413a95570b0cc41c3b46143
- MD5 99c84a1c2cf1acd2ddeb621561789acb
- SHA1 c5efa38a646b02ea2263dacd5a17586295c6fcd3
- SHA512 c0d72a1189f09e9f67400e93ccd797618f9cc17f3a67c91f6e38ff99399f3a51452661bf133227d4991071ba1a402916bf46c049ba501ce69a80276f546ec5af
- SSDEEP 786432:zGZojVmrjV7eIAtehOTZ0oZ4sdUuzt/NCaY2ksCo:zGcVmrjV7eIvhOTZ5RjVCa1tP
- MD5 SHA1 SHA512 SSDEEP
-
Blocklisted process makes network request
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory