General
- Target SinisterClient.exe
- Size 56.2MB
- Sample260627-va2praby4z
- SHA256 d60aec779fccbc1f2a07329ce0cd7a9828565e4008413a0e6119e18903060c98
- MD5 cd48913045b02c206566c1b5e86eda3b
- SHA1 58aae71cd6997c52aed5edca67890e6fb2df27d8
- SHA512 0484357d9da59849ef0732a81e621383d9243d6b1988cf689b939e3a5f5d5fbdbbdcb9728cdcc4633af6cdab4a4e26e856416d4670aa30a6e075f4013c7a32ea
- SSDEEP 1572864:pqOTIAi/1CbQfPOsPh/4vYQB0M0oZSiZqPusNCcKEyAY:FfsPBKfvJ/A
- TLSH T10BD733857F5219A3F9D9953848F2DA72A2A5B8F63FB0456F07A248F50C772C08D707B2
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
SinisterClient.exe
Resource
win10v2004-20260513-en
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
SinisterClient.exe
Resource
win11ltsc2024-20260618-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target SinisterClient.exe
- Size 56.2MB
- SHA256 d60aec779fccbc1f2a07329ce0cd7a9828565e4008413a0e6119e18903060c98
- MD5 cd48913045b02c206566c1b5e86eda3b
- SHA1 58aae71cd6997c52aed5edca67890e6fb2df27d8
- SHA512 0484357d9da59849ef0732a81e621383d9243d6b1988cf689b939e3a5f5d5fbdbbdcb9728cdcc4633af6cdab4a4e26e856416d4670aa30a6e075f4013c7a32ea
- SSDEEP 1572864:pqOTIAi/1CbQfPOsPh/4vYQB0M0oZSiZqPusNCcKEyAY:FfsPBKfvJ/A
- TLSH T10BD733857F5219A3F9D9953848F2DA72A2A5B8F63FB0456F07A248F50C772C08D707B2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Loads dropped DLL
-
Enumerates processes with tasklist
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1