43e89a578fcb9e1cea02e64c24829936b9b47ef6f2acb4e033436f8d5d446168

Analysis

max time kernel
298s
max time network
295s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260513-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
26/07/2026, 22:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
arFtU.exe
Size 220KB
Sample260726-2ce24asthw
SHA256 43e89a578fcb9e1cea02e64c24829936b9b47ef6f2acb4e033436f8d5d446168
MD5 5e269369facd09a383f21d3e599091b1
SHA1 486098d78773574d0b60566991304aab175d3aaa
SHA512 a755ea5bdc752d0afff698a7bee8d78f70a168595ff01564935fe140d6deec27932b0c10be02611e2278830d9fef8ede9e11cf440634865f7baec58a22b74c1a
SSDEEP 6144:FejlHWFiEBx+QncAE0EfFnyVUjYcapLFT1oCGiics:Qj5WUEBx+Q7PEfFnQU+tn
TLSH
T1E024096BD25370FCD652C07852666232B733BA3C47359EF702A3C3359D21AC46E7A929
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery spyware

Malware Config

Signatures

Accesses cryptocurrency files/wallets, possible credential harvesting 2 TTPs
spyware

Data from Local System
T1005

Credentials In Files
T1552.001
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
4144	arFtU.exe
4144	arFtU.exe
4144	arFtU.exe
4144	arFtU.exe

C:\Users\Admin\AppData\Local\Temp\arFtU.exe
"C:\Users\Admin\AppData\Local\Temp\arFtU.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4144

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Query Registry

T1012

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads