Overview
overview
7Static
static
3s.exe
windows10-2004-x64
7s.exe
windows11-ltsc_2024-x64
7libwatchdog.dll
windows10-2004-x64
1libwatchdog.dll
windows11-ltsc_2024-x64
1monero-wallet-gui.exe
windows10-2004-x64
1monero-wallet-gui.exe
windows11-ltsc_2024-x64
1monerod.exe
windows10-2004-x64
1monerod.exe
windows11-ltsc_2024-x64
1uninstall.exe
windows10-2004-x64
7uninstall.exe
windows11-ltsc_2024-x64
7Analysis
- max time kernel
148s - max time network
154s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
24/07/2026, 12:23
Static task
static1
Behavioral task
behavioral1
Sample
s.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
s.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
libwatchdog.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
libwatchdog.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
monero-wallet-gui.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
monero-wallet-gui.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
monerod.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
monerod.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
uninstall.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
uninstall.exe
Resource
win11ltsc2024-20260709-en
General
- Target monero-wallet-gui.exe
- Size 118.2MB
- Sample260724-pkg57sgb32
- SHA256 70caa7a79988f2f2f44d9eac6da76af7515e684e8337ecb8355e95da5e9b25e9
- MD5 e31b091617fbd723ddefef10e6b8a2d0
- SHA1 8a4901999374973d1ae48b377478feea65e7e7e9
- SHA512 abe50f0172ee9eb2baedbbcede5b893e8ce38ccdc45bc91343e4f8a64a08106f6369ada6c386fc247b015968fdeccae780761666fcca42e411cfe88529af772b
- SSDEEP 786432:JALlWiMKPPg+AAQYLgGiJ+4gPE8NQ4rTuQnfjx/J+rznP:JALlcKPPg+ZLLgGiJclrG
- TLSH T1D0487D83F1C95CDACDA7937085DB92327374BD46C7329A9B6244EB352D53AC22E2E704
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 3224 monero-wallet-gui.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3224 monero-wallet-gui.exe