af20a74cc8eb90b8dba9a8dd4f730630f1f476daeaf5776e2cf48e66919fff5d

Sharing

Copy URL Twitter E-mail

General

Target
ZigWallet.exe
Size 71.1MB
Sample260426-e5bh2sfw7p
SHA256 af20a74cc8eb90b8dba9a8dd4f730630f1f476daeaf5776e2cf48e66919fff5d
MD5 2bfcfd81d5525874b401e884def32a0e
SHA1 8646577cdda6a6778a9049aa65b2b40737dc857c
SHA512 3dea4f1fe5f6c7280cf90773ce097853420b16516b7f8fac91dcf5712802a6dbabe170392d81026c3c35307c7b2e29e380c1a28eb5619fba2b4ee39064036de8
SSDEEP 1572864:1txxlOjjxCwiTG7IVoWYBe+KMH9mRFZ/UOLqbcSQWCAoudp6Zx7:1ZoXeTG7IVb+Ky8FdhSQW7rWx7
TLSH
T19EF7331EC8DCC36CCE7965BB6118C273F59849921D3BED20A1E8B66D3020B57767D0EA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution

Malware Config

Targets

- Target
  ZigWallet.exe
- Size 71.1MB
- SHA256 af20a74cc8eb90b8dba9a8dd4f730630f1f476daeaf5776e2cf48e66919fff5d
- MD5 2bfcfd81d5525874b401e884def32a0e
- SHA1 8646577cdda6a6778a9049aa65b2b40737dc857c
- SHA512 3dea4f1fe5f6c7280cf90773ce097853420b16516b7f8fac91dcf5712802a6dbabe170392d81026c3c35307c7b2e29e380c1a28eb5619fba2b4ee39064036de8
- SSDEEP 1572864:1txxlOjjxCwiTG7IVoWYBe+KMH9mRFZ/UOLqbcSQWCAoudp6Zx7:1ZoXeTG7IVb+Ky8FdhSQW7rWx7
- TLSH
  T19EF7331EC8DCC36CCE7965BB6118C273F59849921D3BED20A1E8B66D3020B57767D0EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2
- Target
  $PLUGINSDIR/StdUtils.dll
- Size 100KB
- SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
- MD5 c6a6e03f77c313b267498515488c5740
- SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
- SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
- SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
- TLSH
  T125A33B62A2FA9CF5E4E70B3D1469BB264CBB7B383431D93F2342054B8534586DA2D35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
- MD5 0d7ad4f45dc6f5aa87f606d0331c6901
- SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
- SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
- SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
- TLSH
  T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  LICENSES.chromium.html
- Size 8.7MB
- SHA256 0ba4c7b781e9f149195a23d3be0f704945f858a581871a9fedd353f12ce839ca
- MD5 6ff57c0aeccdf44c39c95dee9ecea805
- SHA1 c76669a1354067a1c3ddbc032e66c323286a8d43
- SHA512 d6108e1d1d52aa3199ff051c7b951025dbf51c5cb18e8920304116dcef567367ed682245900fda3ad354c5d50aa5a3c4e6872570a839a3a55d3a9b7579bdfa24
- SSDEEP 24576:2o9dQ06p6j6j1WOwRiXjYmfy6k6mjK64jK6gjK6e6cjK6feGjl8PpE:BFOeGT
- TLSH
  T15296A52F7B48037306C642A26B8B65CAF21F903F3B561654345CD1681F6BA2983FF6D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral7 behavioral8
- Target
  Microsoft.exe
- Size 180.1MB
- SHA256 6343da9b2ced5c828d52aace4a8de1cb93dc338ddbd3c1185f0feaa69cfc85af
- MD5 c54a97043598a37be7948debe488d9a5
- SHA1 a2a49cfeb1c665ede548803fb6f02145d226a6e6
- SHA512 609323ff10977bfe553281bb8f5a31e236380df99d50f086d5521b8e25eadf73fb011de78e29bf6d387bd99b16f4646581a5f36cb4047101e1dc8646d0743add
- SSDEEP 1572864:A4SuXYuY8+xLxZu3Jidykta0iObusUd557Y8mn/XJjU0X+6s/na9ujx1JE+t8tT7:DWo3Cc1j9X
- TLSH
  T1B0988C03F39A40D9E01DD1758B5B9633EAB1B8894325A2DF27540B522F77EE86B3DB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  d3dcompiler_47.dll
- Size 4.7MB
- SHA256 af7b99be1b8770c0e4d18e43b04e81d11bdeb667fa6b07ade7a88f4c5676bf9a
- MD5 a7b7470c347f84365ffe1b2072b4f95c
- SHA1 57a96f6fb326ba65b7f7016242132b3f9464c7a3
- SHA512 83391a219631f750499fd9642d59ec80fb377c378997b302d10762e83325551bb97c1086b181fff0521b1ca933e518eab71a44a3578a23691f215ebb1dce463d
- SSDEEP 49152:hCZnRO4XyM53Rkq4ypQqdoRpmruVNYvkaRwvdiD0N+YEzI4og/RfzHLeHTRhFRN1:oG2QCwmHjnog/pzHAo/Ayc
- TLSH
  T13C367C5673EA40B9C1ABD178CE479213EBB1781403345BEB4190C669AF73BE16A3E734
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  ffmpeg.dll
- Size 2.8MB
- SHA256 015c30885776c9fe35242bc7ed612c1a3caaf737c4d3116a443e2c473cd87270
- MD5 122ac1450759999a23bb68230770d998
- SHA1 72142d71a8fa21e4a54d23fce08d817cfd4c7ed7
- SHA512 fa0d26b23c2e1a7395bbe63615b103581c0f1fc7663530e154ab569ca28723303738b8c54c3569f9fc1b1a842064db57cffd95a71cfe711f1b91f6a364d664eb
- SSDEEP 49152:o/Prfh/7w2EsYHhrNnpSMGH6qfBvvnIS5ikbUaRkY:o/Pp7wpLBrNnpSF55igA
- TLSH
  T15CD5AD03F7D950D9D029C075979F9223F671344A8F1266EF26E05A202E67FD86E3E329
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  libEGL.dll
- Size 481KB
- SHA256 071160c865fac5bc6c232a10b1906cda0c4315fcf8c5349541cc709e9bcf386c
- MD5 50e76b71cba1747050f591f60d49a465
- SHA1 21d9652102d47bbf818f2a41ebc6e888d88eade9
- SHA512 6923968062cee0d1660280fcd386f13c3b5650d49b73dd66f9c6f4634cb6314d2132d47e161671d41dc355c08bdc55dcdb5b9c566b633db52270a293e23dc312
- SSDEEP 6144:Auf2dkQcAxA+q6RBo8FrjSUPa87/vmddEnikirIhd2p2:bk6z6RG8Frj9bvyEnikirU1
- TLSH
  T1AEA49E15B3E444B9E06AD174CA534642DB76B4920B69FBDF03E492392F3BBE85B39310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  libGLESv2.dll
- Size 8.0MB
- SHA256 c57cf0d74eddd6324a437d3e210949ae39b15c6f058b0828f3cde07c11b6c52c
- MD5 e450b4432235e3ef2ab86f9f12e14680
- SHA1 a6e9f17508d126ddbe5d47c7991512c304b35cf5
- SHA512 ecaaa302c410ebe004bee4d6c93a7ecdcad3257b126ea2d27aaf4f91708876364ad44877e4b107b2d0b88ae8530a83dd6e9d33bb19606d03ea32d9ebcb93d17c
- SSDEEP 49152:a5cuyPXoUUELhguXVfZ7S7LANafEwDpiGCfE9GhGHLYJZk2yGU6reDT8tjDJXMbG:PNES1f2VivcbfZK47NfX436uigE
- TLSH
  T13A867C03F69580D9D00DE2B8975B9627FA3178850728B6CF269417192F7BFE0AB7E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  resources/app.asar
- Size 2.5MB
- SHA256 cf527bf4fa562b56d1716002c313865519ae1068beb23014a861f0b781c072ef
- MD5 b4e9c832b4ded08ce429226dd107bc34
- SHA1 d1a2758d4dabeddea93cadaf2a786ac59a7c21a7
- SHA512 f722762137a6900b4b358eed6a190091da2aa2972b97c7ac9d6a1b715a48f2813b8d06f7314214d6b7e2fd4fcbed3e51d8e4fcb3ece2de6912307876c11919b7
- SSDEEP 24576:YbCX0awP97xnx72tP+7xiPh7xlYxA7YTP07a0qFWcNPm:bX0awP97/7WP+7wPh7fYxA7gP07XqFtw
- TLSH
  T1C9C5B65260B3D833325722F74ACF4152BE20A51BB9449950788C9399BFC7F39F5B2E98
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral14 behavioral15
- Target
  resources/elevate.exe
- Size 105KB
- SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
- MD5 792b92c8ad13c46f27c7ced0810694df
- SHA1 d8d449b92de20a57df722df46435ba4553ecc802
- SHA512 6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40
- SSDEEP 3072:1bLnrwQoRDtdMMgSXiFJWcIgUVCfRjV/GrWl:1PrwRhte1XsE1l
- TLSH
  T1EBB37C1274C0C471E5732A361974CAB14AADFD700E759FAF6398127A4FA01D09A3AFB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral16 behavioral17
- Target
  vk_swiftshader.dll
- Size 5.3MB
- SHA256 9ffb78591fdf2d24f8e7290dc95b98bd16eb59192d9ecec9d656c46164c27e22
- MD5 e165350675c58a0c27ac73ddc852292f
- SHA1 6103eb6d27653238a12b56f092937c58decb1894
- SHA512 972b228a1ad7aa5cd3ccd3e4d1a18489d06b1c2f5d6ad742df250934406281a699717fee38c22902b0d59bdfa2f1bbaaa9bece3ba41292e9d45f7e3354c95d85
- SSDEEP 49152:zun45w3vf22YlLzv3S1Lkc+httkltRx/FU5f/GeQZImSUzRTNaJmAvFOC8pefqql:0P3vfJGXKT8FIjU7s
- TLSH
  T1DD463803F2858099F05DE578875BA623F632B8811B72B6DF52A01F192E77FE06B39705
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  vulkan-1.dll
- Size 874KB
- SHA256 7f6739a3a7f91e817dc5c6f25ec1e04cc453fa2e2c3ae676b198cde76e1fcf01
- MD5 18ff150adb11324a4f3219aac9a7349b
- SHA1 88150d7716d9e1acaf3814ea660f24da1ee70032
- SHA512 536490da0c33aaa26d8b2879ec815a7135f172257f0708dd039042aa309caf129851c12bd01ae8df25ed379eca43d22c150cfabc025fa9f9342afa871da7539b
- SSDEEP 24576:SuZ8ZzBN4kClmtVeEj3GxG6Z5WjDYsHy6g3P0zAk7TOwh2:SuZQnDOmtVeErG86Z5WjDYsHy6g3P0zJ
- TLSH
  T1F4157C23E66486A9E4768034C9D24603C9F274921725B9CF02A84718BF6FFF47B7DB25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19
- Target
  $PLUGINSDIR/nsis7z.dll
- Size 424KB
- SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
- MD5 80e44ce4895304c6a3a831310fbf8cd0
- SHA1 36bd49ae21c460be5753a904b4501f1abca53508
- SHA512 c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df
- SSDEEP 6144:aUWQQ5O3fz0NG3ucDaEUTWfk+ZA0NrCL/k+uyoyBOX1okfW7w+Pfzqibckl:an5QEG39fPAkrE4yrBOXDfaNbck
- TLSH
  T1E9949E22B6D2C036C56E02309918F77921AEB3B1592DDB1B73985B6F7FB44C19E24B07
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral20 behavioral21

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21