General
- Target _184d0b251392babb683b1b7e48ed5a64714655504244f00a02d9cc7c7d483ce1.exe
- Size 3.6MB
- Sample260704-xpmv9act31
- SHA256 184d0b251392babb683b1b7e48ed5a64714655504244f00a02d9cc7c7d483ce1
- MD5 c7c258e259322672128afb6d8d628b04
- SHA1 bed1fd71b919a610ab9ba1e17b0e022cf48150d1
- SHA512 79e8729478f531d9af6275f9431a9a92bf2ce412114fa626ac99716cde9082e05837f8f749b3bfeeb1bf74d50464223f032529bbb3510cc50926927b943f7ab6
- SSDEEP 49152:bbUZ2GxH9nhcZBSI4c38GaY/LWA02lTTUA4EKAfZLVzrVYMeyKVX/FCq2HK4HYDR:blPDaR6X1hLFVYMiFCq6BMuYRr
- TLSH T140069D07BDE108EAC0AE923289B7569A7B74BC490F3227D72E50B6782F767C05C35B54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
_184d0b251392babb683b1b7e48ed5a64714655504244f00a02d9cc7c7d483ce1.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
_184d0b251392babb683b1b7e48ed5a64714655504244f00a02d9cc7c7d483ce1.exe
Resource
win11ltsc2024-20260629-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target _184d0b251392babb683b1b7e48ed5a64714655504244f00a02d9cc7c7d483ce1.exe
- Size 3.6MB
- SHA256 184d0b251392babb683b1b7e48ed5a64714655504244f00a02d9cc7c7d483ce1
- MD5 c7c258e259322672128afb6d8d628b04
- SHA1 bed1fd71b919a610ab9ba1e17b0e022cf48150d1
- SHA512 79e8729478f531d9af6275f9431a9a92bf2ce412114fa626ac99716cde9082e05837f8f749b3bfeeb1bf74d50464223f032529bbb3510cc50926927b943f7ab6
- SSDEEP 49152:bbUZ2GxH9nhcZBSI4c38GaY/LWA02lTTUA4EKAfZLVzrVYMeyKVX/FCq2HK4HYDR:blPDaR6X1hLFVYMiFCq6BMuYRr
- TLSH T140069D07BDE108EAC0AE923289B7569A7B74BC490F3227D72E50B6782F767C05C35B54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects WallStealer stealer
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of SetThreadContext