General
- Target download
- Size 337KB
- Sample260626-twbj1scy41
- SHA256 0242c605cb0c1e2f58678e19476183cbff2b3400c8219c32e9cf96634189db74
- MD5 82296b4fff186917a9ccb9f2a2dce65b
- SHA1 178b109199a02d4a6c8c13f71e54e273f0525ce3
- SHA512 622b6c5bbd82962316a11fe8d0dbc73d642d7ecfee6a4a7332d124372e47b6db2fd66cc4eabf120b4cc2ac4b30e1a4474d278a2c59c9b330a6276b2b6e66e33a
- SSDEEP 3072:xgQPcoA2jsKiP03a5Dk8ZjUV3XeVOzidOb4Fe0JYSMdziVbI0CRtn9eA0R14GODS:CQVnniP0SIam+VQUrFevdz+8DfnL
- TLSH T107743AA5F1A600D5F027C03CC7968511627D74AA13E19EEB375C4228EFD6AF14EB8B6C
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
download.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
download.exe
Resource
win11ltsc2024-20260618-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target download
- Size 337KB
- SHA256 0242c605cb0c1e2f58678e19476183cbff2b3400c8219c32e9cf96634189db74
- MD5 82296b4fff186917a9ccb9f2a2dce65b
- SHA1 178b109199a02d4a6c8c13f71e54e273f0525ce3
- SHA512 622b6c5bbd82962316a11fe8d0dbc73d642d7ecfee6a4a7332d124372e47b6db2fd66cc4eabf120b4cc2ac4b30e1a4474d278a2c59c9b330a6276b2b6e66e33a
- SSDEEP 3072:xgQPcoA2jsKiP03a5Dk8ZjUV3XeVOzidOb4Fe0JYSMdziVbI0CRtn9eA0R14GODS:CQVnniP0SIam+VQUrFevdz+8DfnL
- TLSH T107743AA5F1A600D5F027C03CC7968511627D74AA13E19EEB375C4228EFD6AF14EB8B6C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Loads dropped DLL
-
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of SetThreadContext