180f0fef99f3081fec78d07524052a07a975525f04c7b780687b763e2bacd393

Sharing

Copy URL Twitter E-mail

General

Target
payload_2026-04-17_10-15-57-336736.exe
Size 3.0MB
Sample260418-yr9cpsew2w
SHA256 180f0fef99f3081fec78d07524052a07a975525f04c7b780687b763e2bacd393
MD5 893a4400d0ac1a50fcbb5eb2c18382b8
SHA1 8176000428800beb055f12ed690fb6e45a187ab8
SHA512 7283199446e7f7e95d4bac71e23a810b03d192eb0709ae2d189ce7ce1f0738847cfb05338d104ad531503eb7b31ff93d39aece8a241014edd241fe466f5accf8
SSDEEP 49152:U/5vgQsBZrRf8tGJ2wM9Hlne9tZBR2ooR99f7d5NatnXjueXQpkpnWkKoXT3:UsRfd2fne91K7co
TLSH
T14BE5BE5AD19360EECC2AC170634B6132FE3474599D387E6B7694CB393EB0D603A59F28
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  payload_2026-04-17_10-15-57-336736.exe
- Size 3.0MB
- SHA256 180f0fef99f3081fec78d07524052a07a975525f04c7b780687b763e2bacd393
- MD5 893a4400d0ac1a50fcbb5eb2c18382b8
- SHA1 8176000428800beb055f12ed690fb6e45a187ab8
- SHA512 7283199446e7f7e95d4bac71e23a810b03d192eb0709ae2d189ce7ce1f0738847cfb05338d104ad531503eb7b31ff93d39aece8a241014edd241fe466f5accf8
- SSDEEP 49152:U/5vgQsBZrRf8tGJ2wM9Hlne9tZBR2ooR99f7d5NatnXjueXQpkpnWkKoXT3:UsRfd2fne91K7co
- TLSH
  T14BE5BE5AD19360EECC2AC170634B6132FE3474599D387E6B7694CB393EB0D603A59F28
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

credential_access discovery spyware stealer defense_evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Credentials from Password Stores: Windows Credential Manager
  Suspicious access to Credentials History.
  credential_access stealer
- Reads user/profile data of local email clients
  Email clients store some user data on disk where infostealers will often target it.
  spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral10 behavioral11 behavioral12 behavioral13 behavioral14 behavioral15 behavioral16 behavioral17 behavioral18 behavioral19 behavioral2 behavioral3 behavioral4 behavioral5 behavioral6 behavioral7 behavioral8 behavioral9

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

T1564

Resource Forking

T1564.009

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Windows Credential Manager

T1555.004

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

Credentials from Password Stores: Windows Credential Manager

Reads user/profile data of local email clients

Reads user/profile data of web browsers

Accesses cryptocurrency files/wallets, possible credential harvesting

Checks installed software on the system

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19