General
- Target zira-miszsn.exe
- Size 3.7MB
- Sample260713-pg53vsaz21
- SHA256 99dc1ea286648ec882d71ab5071e3072c702e5170770843177807179c63f4593
- MD5 80588ad7bcc4c92c0b9e005178cf8414
- SHA1 8caf6a3d3175bb375650179e74ec405169f7fb27
- SHA512 590398de2ad0071f1f790c85a20ac2dc847964d827e4df155a745b52294bbd2fbf8b491f8f2ba8ba75807fd74504fdd391348e1328a94225708fe7a805be12ef
- SSDEEP 49152:K6K1K+gBUcOSrSCVb6KbS7RWxHzwiIH5NZSV4P0coLPdAptvDy1d+HzKbC6Hsq1q:huQzG0YQVA0/LPmry1dhLTjUCc
- TLSH T19B06011DE38D52E8D213D134CBA65232EBB4B85A0761B9EB165EC7192FB79D01F3A310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
zira-miszsn.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
zira-miszsn.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target zira-miszsn.exe
- Size 3.7MB
- SHA256 99dc1ea286648ec882d71ab5071e3072c702e5170770843177807179c63f4593
- MD5 80588ad7bcc4c92c0b9e005178cf8414
- SHA1 8caf6a3d3175bb375650179e74ec405169f7fb27
- SHA512 590398de2ad0071f1f790c85a20ac2dc847964d827e4df155a745b52294bbd2fbf8b491f8f2ba8ba75807fd74504fdd391348e1328a94225708fe7a805be12ef
- SSDEEP 49152:K6K1K+gBUcOSrSCVb6KbS7RWxHzwiIH5NZSV4P0coLPdAptvDy1d+HzKbC6Hsq1q:huQzG0YQVA0/LPmry1dhLTjUCc
- TLSH T19B06011DE38D52E8D213D134CBA65232EBB4B85A0761B9EB165EC7192FB79D01F3A310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects AnimateClipper
-
Family: AnimateClipper
AnimateClipper is a Windows crypto clipper that hijacks the clipboard to swap wallet addresses.
-
Drops startup file
-
Suspicious use of SetThreadContext