General
- Target Secur32.dll
- Size 2.6MB
- Sample260726-3apdessxfs
- SHA256 38e74ff8d5f02617ff8858d9094b455d4e999223c7f78726584690e7201d94b7
- MD5 dc5859aa3e12e2bd3e04f1b9d4142abb
- SHA1 d451fd0b6b9cdf481a5867ddcfcccfbe8a0739a8
- SHA512 4dfbf5c19574ff7125fac0dca065e367e098ada7e47ccfffc6c8f0cf271ded3c61cf371d35b9d5a6a35632172e721ea7d0ce6cbcc5d6aeb11c3f9536ea37f16e
- SSDEEP 49152:cC4a6XLfjdh10PNV/S/fZ1V+XuACVfeQ17zQOTIWiK8M7YzhXdRxd:q0PuACVfeQ17zQOTIWiK8M7YzhXdRxd
- TLSH T136C5CF55A3D855A8D467DA388B15E332C2B1B9234B75E08F0A99C7091F77E924F3FB02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Secur32.dll
Resource
win10v2004-20260513-en
6 signatures
40 seconds
Behavioral task
behavioral2
Sample
Secur32.dll
Resource
win11ltsc2024-20260709-en
6 signatures
40 seconds
Malware Config
Targets
-
- Target Secur32.dll
- Size 2.6MB
- SHA256 38e74ff8d5f02617ff8858d9094b455d4e999223c7f78726584690e7201d94b7
- MD5 dc5859aa3e12e2bd3e04f1b9d4142abb
- SHA1 d451fd0b6b9cdf481a5867ddcfcccfbe8a0739a8
- SHA512 4dfbf5c19574ff7125fac0dca065e367e098ada7e47ccfffc6c8f0cf271ded3c61cf371d35b9d5a6a35632172e721ea7d0ce6cbcc5d6aeb11c3f9536ea37f16e
- SSDEEP 49152:cC4a6XLfjdh10PNV/S/fZ1V+XuACVfeQ17zQOTIWiK8M7YzhXdRxd:q0PuACVfeQ17zQOTIWiK8M7YzhXdRxd
- TLSH T136C5CF55A3D855A8D467DA388B15E332C2B1B9234B75E08F0A99C7091F77E924F3FB02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects AnimateClipper
-
Family: AnimateClipper
AnimateClipper is a Windows crypto clipper that hijacks the clipboard to swap wallet addresses.
-
Executes dropped EXE
-
Adds Run key to start application
-
Suspicious use of SetThreadContext