General
-
Target
Setup.exe
-
Size
1.4MB
-
Sample
231029-r299esgb7s
-
MD5
cdb89982fa92b9b7962c99cab62ea4d6
-
SHA1
32764942b6ad4ec9aac486fb0fa1eedcab97322e
-
SHA256
bc751e2748979724f82c7739d9b56ae074c02be11b710e64fefbb9aac4d2a185
-
SHA512
1ec613aed9b213c27b545ff0d3b2852b9770d9d2dc560f43aff5c3fd507970672526b863d59f392f1ca9a78dc66e7946837dd17c238ce284c12e90159f5bd88d
-
SSDEEP
24576:2ZNUkTGwk2iIT+WgfjUk5Mesj7AxbpqnubLfqJhh7aZgpz7GkeNMxE6z:2ZNrk2iITxAds/8xfc/0k+kxE
Static task
static1
Behavioral task
behavioral1
Sample
Setup.exe
Resource
win10v2004-20231025-en
Malware Config
Targets
-
-
Target
Setup.exe
-
Size
1.4MB
-
MD5
cdb89982fa92b9b7962c99cab62ea4d6
-
SHA1
32764942b6ad4ec9aac486fb0fa1eedcab97322e
-
SHA256
bc751e2748979724f82c7739d9b56ae074c02be11b710e64fefbb9aac4d2a185
-
SHA512
1ec613aed9b213c27b545ff0d3b2852b9770d9d2dc560f43aff5c3fd507970672526b863d59f392f1ca9a78dc66e7946837dd17c238ce284c12e90159f5bd88d
-
SSDEEP
24576:2ZNUkTGwk2iIT+WgfjUk5Mesj7AxbpqnubLfqJhh7aZgpz7GkeNMxE6z:2ZNrk2iITxAds/8xfc/0k+kxE
Score7/10-
Uses the VBS compiler for execution
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of SetThreadContext
-