General
- Target 354d3dc2b8997764925d5c42ee1c87acb4ba0bdca257edb7a2e63f53a4678c5c.bin
- Size 625KB
- Sample260716-envwcsf14v
- SHA256 354d3dc2b8997764925d5c42ee1c87acb4ba0bdca257edb7a2e63f53a4678c5c
- MD5 c5301a1371c5be265ed62c10dc87e23d
- SHA1 a705003e5b1dff40451b6a87ca1d3de27491d0fe
- SHA512 69b1976f1fb11df7f61dcc0c3e3b2aea03b83694aed7d2f323beaabad8bda682263e34dfc0d8541b0a40d6796166860283b89588ad98ae520f37c73647853bfe
- SSDEEP 12288:ZUoVNdZJ9HO5ov7LJb7B4abh+1uyxBlDetAqxSvwiA:ZUIvcojLJqa1+1uyb4i
- TLSH T1F2D4C013B9A19076E1724635CD78AB549B7DBC700F20A7CB67C005AA6EB06C0AF37767
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
354d3dc2b8997764925d5c42ee1c87acb4ba0bdca257edb7a2e63f53a4678c5c.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 354d3dc2b8997764925d5c42ee1c87acb4ba0bdca257edb7a2e63f53a4678c5c.bin
- Size 625KB
- SHA256 354d3dc2b8997764925d5c42ee1c87acb4ba0bdca257edb7a2e63f53a4678c5c
- MD5 c5301a1371c5be265ed62c10dc87e23d
- SHA1 a705003e5b1dff40451b6a87ca1d3de27491d0fe
- SHA512 69b1976f1fb11df7f61dcc0c3e3b2aea03b83694aed7d2f323beaabad8bda682263e34dfc0d8541b0a40d6796166860283b89588ad98ae520f37c73647853bfe
- SSDEEP 12288:ZUoVNdZJ9HO5ov7LJb7B4abh+1uyxBlDetAqxSvwiA:ZUIvcojLJqa1+1uyb4i
- TLSH T1F2D4C013B9A19076E1724635CD78AB549B7DBC700F20A7CB67C005AA6EB06C0AF37767
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
3Credentials In Files
2Credentials in Registry
1