General
- Target QuickFetch.exe
- Size 10.4MB
- Sample260721-ylpfcatcng
- SHA256 a42d6c45a80c597e1ced0c59b76761d95ada94c7510176f32186eab043d85e25
- MD5 0d2b893053e535cbb69f369fc059cec1
- SHA1 5b5e9e5f6e93f4d7f2ec2fb6b9cb3bac82f9a4cf
- SHA512 a6d11610c6d062bf0d3e42794efda14715f5420f1bade3c27d31815545352d7483c47ee9db54f9ac648932b1469a73d6e9f2d4b7c1ceb2693bf7d344482f3c4f
- SSDEEP 49152:50h5lbWEv01/wiZeoOqj19fO57ESCLiw2tdf6yCAC56:58lijm5gJLiztd/tt
- TLSH T1B4B66B47EC9148F9C0A9A33189B791967B35BC481B3223E72EA1BB382FB27D05D35754
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
QuickFetch.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target QuickFetch.exe
- Size 10.4MB
- SHA256 a42d6c45a80c597e1ced0c59b76761d95ada94c7510176f32186eab043d85e25
- MD5 0d2b893053e535cbb69f369fc059cec1
- SHA1 5b5e9e5f6e93f4d7f2ec2fb6b9cb3bac82f9a4cf
- SHA512 a6d11610c6d062bf0d3e42794efda14715f5420f1bade3c27d31815545352d7483c47ee9db54f9ac648932b1469a73d6e9f2d4b7c1ceb2693bf7d344482f3c4f
- SSDEEP 49152:50h5lbWEv01/wiZeoOqj19fO57ESCLiw2tdf6yCAC56:58lijm5gJLiztd/tt
- TLSH T1B4B66B47EC9148F9C0A9A33189B791967B35BC481B3223E72EA1BB382FB27D05D35754
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Deletes itself
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.