24636cfe302fe7c74efa9e78f343e1fdd984468117ebf2df80a141ef7a635fb8

Sharing

Copy URL Twitter E-mail

General

Target
SETUP.zip
Size 19.3MB
Sample260713-ghwltact3p
SHA256 24636cfe302fe7c74efa9e78f343e1fdd984468117ebf2df80a141ef7a635fb8
MD5 378bd64d4c90abb345c0ec3bf4cc4962
SHA1 373f5f2af400943e959f7aeb16dca2b0cf90cb8e
SHA512 97ee447a249ecfa8187895313ebea75a30ce5a94075e004d5236a1b049ffea8025b3cee85e9914cc2466c8f0c2c50d63dd13154792b58f1e4a7e642b3af7bc72
SSDEEP 393216:VvoJYzm4PaJBjPvwL4835pf/9vV00s7UMMeEH5tWehhfkiI7UXFD1iOL:VvoJE5EtgL445ptvV0LBMhEgh9I7mmOL
TLSH
T1361723BCB4B5B96AF5D4433BC6C12CB2DB2CA540D7D93D9B8E2041527EC320E5F6A861
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  Setup.exe
- Size 94KB
- SHA256 8c1b9b8e72264e27253a7cc14d6f9a560a127ebd9f8bcec81faba94710c19a47
- MD5 eba77a34e9b8aa78fce520d1431fc68b
- SHA1 215105e2640cd6da8adc1ea9ddafeb08c4d50f9b
- SHA512 fa66a42dd71fc862c218777b572f143144a7de0c5d8630061a554e6ebb9ad4557d810e7ca75598254231cb41dec2391c49a362206b8275742b5a5b92ee33417f
- SSDEEP 1536:ZaakYDoIhIxHHWMpdPa5wiE21M8kJIGFvb1Cw3/73sJxy+C:FDpSwMpdCq/IM8uIGfN/73sJTC
- TLSH
  T1A593D541E62DBDDDE508D4310A75E0F25E24EC3176C0A51EA7F37F0629726A3F90A93A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

discovery spyware stealer
- Suspicious use of NtCreateUserProcessOtherParentProcess
- Reads user/profile data of local email clients
  Email clients store some user data on disk where infostealers will often target it.
  spyware stealer
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2
- Target
  browser/AccessibleMarshal.dll
- Size 18KB
- SHA256 53877a2a0cc9a4f661800abf912727bdbe984166e32e87ba5f2e7fdeee868517
- MD5 5370753b7db6dc2c8e5e57d2a4ad6702
- SHA1 999699031e63203fed4e1559f8d6d462fbb298c2
- SHA512 6288b16e259c66dce928501fc6b0e7acff07b705b12041affa613934ead4c0c8af4c17c4e4951cee4369093048f78c9006df356bf3cb73b98eb3e9a42c5e570d
- SSDEEP 192:GhQ73jms5mTDTVXeMjOBLI7qIAtxiYdrz8AIWDqVfnR/+Oc77rX8Y+AV3:GhNoqPdeMjWLBxxMAWjmOc/j8Yv3
- TLSH
  T13E82B492FF40C962CD9D04381C9B83A69A69BE049FE341D73B81331E2D322D57FB5A95
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  browser/api-ms-win-core-file-l1-2-0.dll
- Size 10KB
- SHA256 62a4810420d997c7fdd9e86a42917a44b78fb367a9d3c0a204e44b3ff05de6d4
- MD5 7d64aefb7e8b31292da55c6e12808cdb
- SHA1 568c2a19a33bb18a3c6e19c670945630b9687d50
- SHA512 68479da21f3a2246d60db8afd2ae3383a430c61458089179c35df3e25ca1a15eba86a2a473e661c1364613baa93dcb38652443eb5c5d484b571ab30728598f9b
- SSDEEP 192:yaHNWthWGWf9BvVVWQ4SWtKGpzjpC52qnajABI1QOg:/NWthWrN6Nlse1Y
- TLSH
  T166322A828BB85003F59A6E7062E5D5933D3D67DB1A21D05929A9F1E82CC33C1EB00B2E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5
- Target
  browser/api-ms-win-core-file-l2-1-0.dll
- Size 10KB
- SHA256 6572965fd3909af60310db1e00c8820b2deef4864612e757d3babab896f59ed7
- MD5 dcd09014f2b8041e89270fecd2c078b2
- SHA1 b9f08affdd9ff5622c16561e6a6e6120a786e315
- SHA512 ef2ac73100184e6d80e03ce5aa089dbddb9e2a52adf878c34b7683274f879dcf2b066491cfc666f26453acbd44543d9741f36369015bd5d07e36b49d435751f6
- SSDEEP 192:9WthWmWf9BvVVWQ4SW7JXSFsmsqnajrQAIf:9WthWLNi2s9lPQ3
- TLSH
  T1AA324BC287ACD043F697AE7042D4D9837D3D7BD71A51905A0A59F6AD2CA33C1DB00B6E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral6
- Target
  browser/api-ms-win-core-localization-l1-2-0.dll
- Size 13KB
- SHA256 3dd2e16b6f135cdd45bce4065f6493540ebbaf2f7f1553085a2442ea2cf80a10
- MD5 3979437d6817cdf82da474c8a1eefb0d
- SHA1 5e96fe40993acbc7c2e9a104d51a728950ad872e
- SHA512 4f64c6d232fdae3e7e583cb1aa39878abbfbbc9466108b97a5dce089c35eb30af502b5b212b043c27c1b12b23c165bd2b559060c43d9e2efcdda777b34f0066b
- SSDEEP 384:+HOMw3zdp3bwjGfue9/0jCRrndblWthWZNls9lPQ3I:QOMwBprwjGfue9/0jCRrndbUA3c
- TLSH
  T138520992D7E8E207F54EEA713056D9433C3CA78A4922D59603E6FB6838E3385E75072C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7
- Target
  browser/api-ms-win-core-processthreads-l1-1-1.dll
- Size 11KB
- SHA256 3a5d176b1f2c97bca7d4e7a52590b84b726796191ae892d38ad757fd595f414d
- MD5 4da67feefeb86b58a20b3482b93285b3
- SHA1 6cd7f344d7ca70cf983caddb88ff6baa40385ef1
- SHA512 b9f420d30143cf3f5c919fa454616765602f27c678787d34f502943567e3e5dfb068fec8190fea6fa8db70153ed620eb4fe5dc3092f9b35b7d46b00cc238e3ba
- SSDEEP 192:5/DiDfIepWthWjWf9BvVVWQ4SW4zKsmsqnajrQAVO:EDfIepWthWuNCs9lPQAg
- TLSH
  T1E0323B92CABC9043F5D76E706294E9533D3EA7DB1A35D0660165F1AD2CD3382EB0062E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral8
- Target
  browser/api-ms-win-core-synch-l1-2-0.dll
- Size 11KB
- SHA256 42367b6b7285bddc185c0badefe49e883646f574b1d7d832c226f2d1ce489c5b
- MD5 c250b2e4ff04d22306bf8ce286afd158
- SHA1 e5c60b7892ff64cbff02d551f9dbf25218c8195b
- SHA512 a78c4ddf98330698c9da8d1d2c7c3176f22dfabf0900008cff1f294f56a2a14b52becd09ba37a065d544f58617911b3f5850614b5aabd0ec7daf236f29c9b10b
- SSDEEP 192:dY3ZDQtZ34WthWhIaWf9BvVVWQ4eWqgqtkqnajOyr39fk:dY3ZDQtZ34WthWhiNClqyry
- TLSH
  T1803229C7CBA86507F9A7AD7046D5D4933C3C9BD619219065129AF2A92CE73C2EB00F1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral9
- Target
  browser/api-ms-win-core-timezone-l1-1-0.dll
- Size 11KB
- SHA256 4f77abb5c5014769f907a194fd2e43b3c977df1fb87f8c98dd15a7b950d1e092
- MD5 3339350008a663975ba4953018c38673
- SHA1 78614a1aad7fc83d6999dcc0f467b43693be3d47
- SHA512 a303fd57dd59f478a8d6c66785768886509625a2baf8bf2b357bb249fc93f193ac8c5c2c9193e53738805700e49b941bf741d6c4850a43f29a82424ccdda191b
- SSDEEP 192:M3WthWjWf9BvVVWQ4SWiXfvXqnajJ6HdKpx:M3WthWuNNXll6Hdmx
- TLSH
  T161321993CBB88003FDEE2F7046D9D9937D3C67EA6920C1A905D6E5992C973C5DB00A2D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10
- Target
  browser/api-ms-win-crt-conio-l1-1-0.dll
- Size 11KB
- SHA256 687be4f560dc3fb96bcda9332617a2d4b1d587411dd1c31ad088146ac0b24a76
- MD5 eb07d1e84fd3fd83e71c1ea7ae8498a3
- SHA1 b162375e93c40955244342d18902bff8ed902674
- SHA512 5787637599e1ec9f086c78bfa4ce7d49a8374404dbce8d884e90282b366a446ef3444288add0f3741c642beb01266555053091bdee2ee70bf6126052bf1564e0
- SSDEEP 192:wEWthWyWf9BvVVWQ4SWbTKMdn2KqnajySHrG:wEWthWPNanll1HrG
- TLSH
  T1C242F89397EC5903E1575F30A6F8EAC37E3D57D72920A06A4849F56838C73D9EB0062D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11
- Target
  browser/api-ms-win-crt-convert-l1-1-0.dll
- Size 14KB
- SHA256 347ceeb26c97124fb49add1e773e24883e84bf9e23204291066855cd0baea173
- MD5 392b572dc6275d079270ad8e751a2433
- SHA1 8347bba17ed3e7d5c2491f2177af3f35881e4420
- SHA512 dbdbd159b428d177c5f5b57620da18a509350707881fb5040ac10faf2228c2ccfd6126ea062c5dd4d13998624a4f5745ed947118e8a1220190fdb93b6a3c20b7
- SSDEEP 192:3M0wd8dc9cyNWthW3Wf9BvVVWQ4SWLbnstWqqnajWz:80wd8xyNWthWKNUe7lKz
- TLSH
  T18D62C65366D83F26E69B177221FEC7E76A390781259142B4C207E55C3883782BE97C1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral12
- Target
  browser/api-ms-win-crt-environment-l1-1-0.dll
- Size 11KB
- SHA256 cf601a7b883bb4fb87c28b4a1d9f823d2454b298cdbcb4da4f508db8bd1278ba
- MD5 9806f2f88ba292b8542a964c0b102876
- SHA1 c02e1541a264a04963add31d2043fa954b069b6b
- SHA512 d68cb926de3caa498ad2aea60e2c5dbb72f30836a6ad9bb11a48f2ca706656981d9332dae44769ccf6f8de3b2ea1507983440afbe1322520f2fd1674cd8de823
- SSDEEP 192:f9KNMWthWbWf9BvVVWQ4SWAV/tkqnajOyr39J:1KNMWthWGNQlqyrn
- TLSH
  T1363229828BBC5507FA972E7081F8E9933D3DABD7691181791659F2982CC33C1EB11A1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13
- Target
  browser/api-ms-win-crt-filesystem-l1-1-0.dll
- Size 12KB
- SHA256 6cc23b34f63ba8861742c207f0020f7b89530d6cdd8469c567246a5879d62b82
- MD5 1747189e90f6d3677c27dc77382699d8
- SHA1 17e07200fc40914e9aa5cbfc9987117b4dc8db02
- SHA512 d2cc7223819b9109b7ce2475dfb2a58da78d0d3d606b05b6f24895d2f05fb1b83ee4c1d7a863f3c3488f5d1b014cd5b429070577bd53d00bb1e0a0a9b958f0b1
- SSDEEP 192:YGnWlC0i5ClWthWIpWf9BvVVWQ4SWPlQ4Ms5jpC52qnajABI1yVqC:XnWm5ClWthW/NKKls5Nlse1TC
- TLSH
  T14752094347E47D13EAAB2F7252F9EBD73F3D1B82154382669016E56839D3380BF0295A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral14
- Target
  browser/api-ms-win-crt-heap-l1-1-0.dll
- Size 11KB
- SHA256 a3f13fa93131a17e05ad0c4253c34b4db30d15eae2b43c9d7ec56fdc6709d371
- MD5 1bcb55590ab80c2c78f8ce71eadeb3dc
- SHA1 8625e6ed37c1a5678c3b4713801599f792dc1367
- SHA512 d80374ec9b17692b157031f771c6c86dc52247c3298594a936067473528bbb511be4e033203144bbf2ec2acfd7e3e935f898c945eb864dcf8b43ae48e3754439
- SSDEEP 192:uaY17aFBRQWthWAWf9BvVVWQ4SWk7djwqS8uUgxfzfqnaj0O4WzQ:0tWthWFNl5nFIrloqU
- TLSH
  T1E9422B938BBC6503F2576F7066E8E68B7D3E57C67D518066415BF29828433C0EB11A2E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15
- Target
  browser/api-ms-win-crt-locale-l1-1-0.dll
- Size 11KB
- SHA256 4615ec9effc0c27fc0cfd23ad9d87534cbe745998b7d318ae84ece5ea1338551
- MD5 7481e20041cf8e366d737962d23ec9de
- SHA1 a13c9a2d6cf6c92050eaae5ecb090a401359d992
- SHA512 f7a8e381d1ac2704d61258728a9175834cf414f7f2ff79bd8853e8359d6468839585cb643f0871334b943b0f7b0d868e077f6bd3f61668e54785ee8b94bf7903
- SSDEEP 192:B9vbJWthWZWf9BvVVWQ4SWRHQ0tkqnajOyr39jGJ:B9vbJWthWMNS4lqyrM
- TLSH
  T1B6323B878BFC5403F5976EB055E8E6977D3D6BC725028069115BF6A82CC33C8AB00A6E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral16
- Target
  browser/api-ms-win-crt-math-l1-1-0.dll
- Size 21KB
- SHA256 190a2cc8c8e47fcd4d07b4e260e247fb3b5fb4661aa50f7b05158cd062d80762
- MD5 f4e9937296ec528938a3c28a48687f5c
- SHA1 961390a2c5e08336857c8a39b254b2bfe3d8bdc6
- SHA512 00ccf9326e593236f57c39ffcd3ab1a77c54755c5f938207ad548d64d60a7468ea21f6e340d385e6576bb049bca1dd318da572c5808c353dda1c4629fd99bc42
- SSDEEP 192:eqTycTGMMmfcObM4Oe5/cDHosrbmkvALwPIgTmL45WthWlWf9BvVVWQ4SWO2odVE:xt1MCbM4Oe5grykfIgTmLCWthWgNwlKU
- TLSH
  T1EEA2B74789ECFF63E5CF0BB701F48BCE6A381AA165E1B5B4D887918834927C07E47949
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17
- Target
  browser/api-ms-win-crt-multibyte-l1-1-0.dll
- Size 18KB
- SHA256 b05a5303c9c1059216787e878884b96474480ae5505dc60be97095f8cdf876d5
- MD5 34cbf951dfe519d8cc0034d13026bb26
- SHA1 156e860545717772c0b290ac9bf6883d9769419f
- SHA512 5e812c17866edf300c21f8d5ee121ee8b4225288ff10a937870356ee2dc780a54fb3244ab6a01ce8ff2fd2d2fa023377335d8da13f09b8c8e6fc30c6ee53cecc
- SSDEEP 384:0SrxLPmIHJI6/CpG3t2G3t4odXLRWthW5NsH9slEE87oV:0iPmIHJI6msut7g
- TLSH
  T1A4920E6B8EA83E12D58FD7F3B5F2C7C62A350F8111C07375A66B95483842EE9BD42E05
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral18
- Target
  browser/api-ms-win-crt-private-l1-1-0.dll
- Size 64KB
- SHA256 e5799a718cfa39b0b6ccdc88f3732cd5dd13c5e4a64de6cff4ed4eba20de3371
- MD5 c79ddcfa529dc335ed3e5d538243bf92
- SHA1 1c960c665242142aca25df06a0bc29c73126bc73
- SHA512 07a36836daac82a993c198402633ccab80ac1046bc3f85ebac7bef6219b6c8a8c3aac88e96d1143e33e113a7a73f8b6dfe0d7c91920ab9f23b532d64fa5d3589
- SSDEEP 1536:vfolDe5c4bFE2Jy2cvxXWpD9d3334BkZnkPHOtq:XolDe5c4bFE2Jy2cvxXWpD9d3334BkZy
- TLSH
  T186531AEB89E63F22E18FF7A767FB13C90B253E4418806174E9C7556B34853A9BC43A41
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19
- Target
  browser/api-ms-win-crt-process-l1-1-0.dll
- Size 11KB
- SHA256 194f04516084785a9650eac58777ae7acebd90d5fabc3e21cebdf705cc0d34b6
- MD5 c498a15de6a91156009c6e5bc0de1ff2
- SHA1 1b015d9f793518be3c579fdc4334bf81e6f4e874
- SHA512 898107d0d34a6668c7d00e2c4818023f7ada7229eb06e7bcf7bf745575f30f8dd58503fbd266f9f5498dad915e7344000684a0cf533781130c471a30307edb67
- SSDEEP 192:MConqjd7NWthWuWf9BvVVWQ4SW0wmqqnajWW/Q:MConsWthWzN+lK+Q
- TLSH
  T1EC42F78797EC6907E6635F3081F8C783BF3F57C6685091798856F19D3883385AB20A2E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral20
- Target
  browser/api-ms-win-crt-runtime-l1-1-0.dll
- Size 15KB
- SHA256 078d2551f53ca55715f5c6a045de1260ce331b97fd6d047f8455e06d97ef88dc
- MD5 047c779f39ebb4f57020cd5b6fb2d083
- SHA1 440077fc83d1c756fe24f9fb5eae67c5e4abd709
- SHA512 95a57d79c47d11f43796aea8fd1183d3db9448dee60530144b64a2dd3cd863f5b413356076c26101d96dd007ebf8aff9e23cf721ba4e03d932c333b8e5536b73
- SSDEEP 192:1JB0fhrpIhhf4AN5/jiDWthWhxWf9BvVVWQ4eWVvjwBjpC52qnajABI1wkM:10hrKIWthWhkNIjwBNlse13M
- TLSH
  T18062D7438BE83F27E58B2F7316F9D7D71A3A6382261091799497F09838C3781BD5721A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21
- Target
  browser/api-ms-win-crt-stdio-l1-1-0.dll
- Size 16KB
- SHA256 e6bab87156c9e7ae14ce36a754eb6891891a22ddfff584b706538152017fbb0f
- MD5 10e9dfc88bf784847e7b9aab82e28d0c
- SHA1 cb750cf87d561ca32f5860854da374dae6c9f2ad
- SHA512 29c2edb44cada75ee8ccae1b55a405c8282c937450913196d54b6da1a1e121451c6e14a92a200574984961fa8c649d8a40caf58ea50a33d42a7dfae4439091c2
- SSDEEP 192:wpPLNPjFuWYFxEpahDWthWAcWf9BvVVWQ4SWQZ/bSoMdn2KqnajySHUZt:w19OFVhDWthWSNpQnll1HUZt
- TLSH
  T12472B44395E87E02E28B473329FAFBEA5B3557833804B17DC407E89835CA389BE07559
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral22
- Target
  browser/api-ms-win-crt-string-l1-1-0.dll
- Size 17KB
- SHA256 d343529d2a49cbb89d644deafce573b873ab45e0bf57e2d906b2f2a964d7bd9a
- MD5 1f1d50aa4553e77f6b90ae13bd56a95c
- SHA1 cf421a298f485c2a000791e1840ededeea19bad0
- SHA512 a08bdcc2883066a8bdb9336eec5c7f8593202c367ce75a7d7390ed4c6e0e1dbe80b7afadeee78f12ac0386d70ac360af12bf0ff3285acda0425789038951f180
- SSDEEP 384:uFvU4x0C5yguNvZ5VQgx3SbwA7yMVIkFGlPWthWENkEDnll1H+vBn:C5yguNvZ5VQgx3SbwA71IkFFx1MBn
- TLSH
  T15182A54386F83F01CA8F57B359FA87C72A384F4625416379D427A5CC3882796BE6790D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23
- Target
  browser/api-ms-win-crt-time-l1-1-0.dll
- Size 13KB
- SHA256 704ad27cab084be488b5757395ad5129e28f57a7c6680976af0f096b3d536e66
- MD5 fa5327c2a3d284385d8dc3d65935604b
- SHA1 a878b7cdf4ad027422e0e2182dad694ed436e949
- SHA512 473ff715f73839b766b5f28555a861d03b009c6b26c225bc104f4aab4e4ea766803f38000b444d4d433ff9ea68a3f940e66792bae1826781342f475860973816
- SSDEEP 192:ry5NDCWthWVWf9BvVVWQ4SWxnYMdn2KqnajySH2rm:rUEWthWwNunll1H2rm
- TLSH
  T14B52F94396E4BA07F59B1B3112F9D7D73F3817C22A90A06A811794943AC7384FE1356D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral24
- Target
  browser/api-ms-win-crt-utility-l1-1-0.dll
- Size 11KB
- SHA256 340ced80fbcfca804925ff680da1929f68b95959fd7e4d0c9f67322bb5fe2155
- MD5 cefab9071ec289d88bb312816e62ca82
- SHA1 bd95bd97332ea21506171924acde4f4248a2ee6a
- SHA512 03c4b2b155392dc02370994d28b78d18c38ccbb0c594866ae31db54111f0f18e264e1378acde0f2638e19871d7e3df7ca3365ad63c0de689c331f6e5b14e3582
- SSDEEP 192:pmXI6fHQdufWthWakWf9BvVVWQ4SWHLUKtkqnajOyr39u:p+fZWthWaRNHlqyrI
- TLSH
  T1D1322B838BFC6503F6AB2F7082E8D9C37D3D5BC6691081654156F2993883BC1EF11A1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral25
- Target
  browser/d3dcompiler_47.dll
- Size 3.5MB
- SHA256 4a62063a3c7efcf0faa3800a93fcd26728ef753d3b83bc919c12cebfb582f0f0
- MD5 cd8a3be4d5871171fd0b107132d97be8
- SHA1 415258c10477a49d0c046a12123ff7abe957612e
- SHA512 4acb09bf0c4c8e704fa6e2a20d98c5ff17ef77fc30b8c86b975f5aff8d6448c6e521588106b7810a2c0ab4c5af63519821da590830b37cf2faec380c8ae9e2af
- SSDEEP 49152:grToHAsisjBFjJMLhHELxJm8ZU8W/GKa5Z535TMpiUAFzxkF+cD1gbqCG7jHbOkV:g2ZOb8W/GVhUAFzxSyNFy9AQ
- TLSH
  T11E068D25F6018072D8CB01B156ED7F6A943C5B3047B858C762D4EE66EE701E32F3AB66
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral26
- Target
  browser/default-browser-agent.exe
- Size 617KB
- SHA256 8b59ae42641ebabf2796a5d171ef8b0b15317291fda5be2c62c3d3d182e2d085
- MD5 46be73419c111c744f6daab2cdf17acf
- SHA1 9fb20bb818fa353dabc35fb059686563f0016be0
- SHA512 ffdf623f5597491fe67eb600b03e69eef4d315d669a81034bd88682578b0e14ba71397558b4c233f3d9512fcb9c10b41a369318ece6c13385c2751de0b1612a5
- SSDEEP 12288:4MrQfywGroYdw4iSgVFA+Y03L2rn65hYiWiOrC+xjJ9ETR:jQfywvFllQn652iOrDA
- TLSH
  T123D46C02F6C2AE72E90A1371285FE3356B3698045B16DFE7A3C4AE317C162D22D3579D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  API/aboutConfigPrefs.js
- Size 2KB
- SHA256 1a862cc47806d29acaa6a390df9fe71e5201442a9987ef96f4492f2c26bd2d93
- MD5 1cae5274e60236028802f2491e5b879e
- SHA1 311d3fe1b45565fa9e1a85817ad4a1c2693082e0
- SHA512 69acef004325bdcfef70e057cfc17462fc82eb533b8fa8ed52408059c6063abf52f3de2c8a32b173052277de32d4049ee01354a7b350b37614f1324432557c1e
- TLSH
  T10F41992D68F310180067B9156E177004BA25859B08BDE9E6BEDC95306FCA71990F5FF6
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  API/floorpActions.js
- Size 2KB
- SHA256 335c0a1b22d5a5de97167da0af7062fb73a181fd041bf516cd9876cbdf252d0a
- MD5 4d2c5971cc82b21f284f3cbd81f133c3
- SHA1 ec0b314ea4384eeec163972973df4546880092b8
- SHA512 e0f56d100d9b00d397e7d5984ec9e62693b4417c254828c483a59cd4814b1915794c9133613d5676ba16fc24fcacd720c19118f693c5b45dc31cd7b28e4b77a7
- TLSH
  T1C851810AA9FA162144FB74139B9B3338353589572C9DA901398D46A46F5923BC8A4FE8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Suspicious use of NtCreateUserProcessOtherParentProcess

Reads user/profile data of local email clients

Accesses cryptocurrency files/wallets, possible credential harvesting

Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32