General
- Target 8e8cecb215eb444d600da0f01c2666dd82e29a69d6f9b37994d10d4cb23510da
- Size 3.5MB
- Sample260503-e87ewsbx4z
- SHA256 8e8cecb215eb444d600da0f01c2666dd82e29a69d6f9b37994d10d4cb23510da
- MD5 b8cce0072184a982a8e6f385db908eb3
- SHA1 bd3a0c47f31435ad786c079d2ce72f9b671b6e77
- SHA512 a2d432c77f17e32b386bb220ef18ca24d0ee8574f2df93f55cf0f5e036df372ac102022c3578f6bb174bbfa25bc60a5f5eeb278a86207e83aebe230e7503301a
- SSDEEP 24576:upCxa+1PWwGrPJwOQq1HRT0lkNqifVpSW2NNG:uM4+1+sOQSHRD3fyW2PG
- TLSH T1A706F25CE87309F1DBCD45A51847A7B34F28535C8E06B36B2B7E029C7EA24224876D6F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ScriptyencX.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
ScriptyencX.exe
Resource
win11-20260130-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target ScriptyencX.exe
- Size 721.2MB
- SHA256 57d8c7302f6074334e19ba2afee8c3e110996b7be07ccc2dc35219f03689d69d
- MD5 add4f16b05d47df0364766e662b18bc0
- SHA1 6ab24e4769f4a334a836245c0756eadaf5e6d4a6
- SHA512 dc46a2705a26cfe0744d47e03d09240ed760ef2aba281fbd265a7d6fb0e5bbc48b535a53fe491fc05c5ed7d1db8f3c7bc48ed4d62d05b146c4d2d0e124603393
- SSDEEP 24576:puEqKDFb0ikveEQcURYswa5BpCrBZY0qSrg0IK52lGhsweaWDH6Fhele5n92jcNl:puEqeR05eEQNmrBZH89K52tfamkO7S1
- TLSH T169796555149B092F622C1A531FBB1630FE2CB127CA4966E27EB81309F31E9C953677F2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.