General
- Target Crypto Wallet Hunter Pro.exe
- Size 32.2MB
- Sample260709-vk1kfaes2q
- SHA256 984ec5bc0b4d3d412a117f911b4685ce9b1c93e6e66962a079327e90988e0337
- MD5 185c4f41b8e07939607c2bc9de308b99
- SHA1 e4237d746d74e57b22f4dfeb191f15ff6fcce2c6
- SHA512 7121c1796ed45237d40a81dd646e32a32c5ada019b40e580e8dd88ff6f6a9fea5512c6cd8af6e5de14bdcbbb5161ff53e95c0388860f710eb4b77d0a3a698cd6
- SSDEEP 786432:Xznxv2JLN+0HrxD51S8kOZY7y1UYUg1wpVEgzSC0pgi:jndEFHrD1SV7UU2lgzD0pgi
- TLSH T17F77335902F1057BF9AFA235A17D8273D2B2B910172289DF1F8857782D772D28C77BA0
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Crypto Wallet Hunter Pro.exe
Resource
win10v2004-20260513-en
10 signatures
600 seconds
Malware Config
Targets
-
- Target Crypto Wallet Hunter Pro.exe
- Size 32.2MB
- SHA256 984ec5bc0b4d3d412a117f911b4685ce9b1c93e6e66962a079327e90988e0337
- MD5 185c4f41b8e07939607c2bc9de308b99
- SHA1 e4237d746d74e57b22f4dfeb191f15ff6fcce2c6
- SHA512 7121c1796ed45237d40a81dd646e32a32c5ada019b40e580e8dd88ff6f6a9fea5512c6cd8af6e5de14bdcbbb5161ff53e95c0388860f710eb4b77d0a3a698cd6
- SSDEEP 786432:Xznxv2JLN+0HrxD51S8kOZY7y1UYUg1wpVEgzSC0pgi:jndEFHrD1SV7UU2lgzD0pgi
- TLSH T17F77335902F1057BF9AFA235A17D8273D2B2B910172289DF1F8857782D772D28C77BA0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Enumerates processes with tasklist
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
2Credentials In Files
2