General
- Target 1
- Size 12.9MB
- Sample260706-thw9kads4r
- SHA256 0c74d3e1ebaa175150cae14a53f8d96141be92d1fb154a43bca5ea2920f0cab4
- MD5 ad57b6667ae9f80da13d520c6251bf48
- SHA1 779b5f0d6094870ded726d627899e377b621fcbc
- SHA512 ff84dd46b14ae20d4ebcff514f7a5bf31f26e819819a8d5643fa085913c766871039f980cf46a57a7759af9eae93431dfe9713c286612a145704564bb3d8e9a2
- SSDEEP 196608:1f9H18/Tk3f8imOE/yjig82EkYhVKRVYtfh1goZg4pBkPLrqRJ9kBEJdlBxsQnyk:FRO/Kf8XyLpBR2tfh+PfqRJ9ddljsib
- TLSH T191D63382777C50DB7C69D754BC1228B4E4B9A16AACF32ACD3E03619BEC377D8151E818
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏.zip
Resource
win10v2004-20260513-en
19 signatures
900 seconds
Behavioral task
behavioral2
Sample
𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏.zip
Resource
win11ltsc2024-20260629-en
0 signatures
900 seconds
Malware Config
Targets
-
- Target 𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏.zip
- Size 12.9MB
- SHA256 66d20d15fd88fc432697cf9713ed1f2847021719661b974af54aacb5e95edb9a
- MD5 a3d6daf9655da3213f4f6b9812e52a74
- SHA1 dbefb7f383db455786b7168d4885f76056c0f7a1
- SHA512 148d19172f169c5f24906ee1e55dc58f4f31f421efc52371c402ccf4583bee057de06ff70ae9e4bad79ca571662335aa532d79556b0616c8eb92c3f9f1da0319
- SSDEEP 196608:Af9H18/Tk3f8imOE/yjig82EkYhVKRVYtfh1goZg4pBkPLrqRJ9kBEJdlBxsQnyJ:2RO/Kf8XyLpBR2tfh+PfqRJ9ddljsiQ
- TLSH T1D9D63382777C51DB7C69D744BC1228B4E4B9A16AACF32ACD3E03619BEC377D8151E818
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of NtSetInformationThreadHideFromDebugger