General
- Target stlupdt.7z
- Size 3.5MB
- Sample260705-te21msdw4w
- SHA256 9c93454072525b2c4bd008221b42598260f5149135fd18e8df55027d80b54cec
- MD5 215052dfb239a9ef3554d5f8870f27ba
- SHA1 bb21a97ff12815a04eacac6e74168beb3952e627
- SHA512 bba9cf5f2fcec108a8492df3f623ebb31b912f3ef99791e0050bac84dc7e2bac2dd5163473b0d07a6011c0108a3ce67690af7f3be05086f4032e61855541605a
- SSDEEP 98304:wjvznXreqKpupY02N2jjCYcHT1zu7ZQ3eMTWxMjL5Q:WziqxpYbN2nCYcHT1t4MjL5Q
- TLSH T100F533AE1D5FC62D3340863459F5FE652D921CBF32ABE98447C00A0E6C8AD629751CBE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
sslconf.exe
Resource
win10v2004-20260513-en
12 signatures
300 seconds
Behavioral task
behavioral2
Sample
sslconf.exe
Resource
win10ltsc2021-20260513-en
12 signatures
300 seconds
Behavioral task
behavioral3
Sample
sslconf.exe
Resource
win11-20260513-en
11 signatures
300 seconds
Behavioral task
behavioral4
Sample
sslconf.exe
Resource
win11ltsc2024-20260629-en
12 signatures
300 seconds
Malware Config
Targets
-
- Target sslconf.exe
- Size 29KB
- SHA256 fd826215add30c1319eefa291b6eaf8ddfa7720cfe816c49aef6fe8a88de7939
- MD5 71fdd6fb7f0acd3e9a6206851452e11b
- SHA1 82011a9ff3692236df69427eb200ba05799205b0
- SHA512 f3648fc671e5300b386fb4412fb015144bd6d2d5e919aece6eeb6247889ace6fb4ecd04386f271f0978ea2072501122ae0b5f77695709aac1748e4ae5c3439cc
- SSDEEP 384:51FiQ200ruE3ae6GIlp3HQIYiB53y1ny8RbmL4nNytn:piPuE3aplB5Yi05AL3
- TLSH T15BD26C47DB911CC6D937CE31A4F11A2AE672755107B1C2EB1328825A4FA27817E7D3EC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Credentials from Password Stores: Windows Credential Manager
Suspicious access to Credentials History.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
2Credentials from Web Browsers
1Windows Credential Manager
1Unsecured Credentials
2Credentials In Files
2