General
- Target Setup.exe
- Size 719KB
- Sample260726-vpcn6sfd72
- SHA256 35a13d030bfba6eefd0b668a818987345d9ad4ccf28027f4221ae7ebe30b0c83
- MD5 410d5a8e676d57b2a11a40aa496c8f6e
- SHA1 c572b6cac05c27973194f8a1a2fb9a576dce0ce2
- SHA512 02b36cd3f4a0a23dc9ae6a83a2a0f57e95d4be147d4ba8f21386184d513344fbfd6fd9ad194ed49ee737672bfb7b21448e9d4710f86f07a29c443d6f2237c7be
- SSDEEP 12288:o6J59t2JTBP1TrTk087uU0F8zYkLe4riNsRCjZnwyJaJtm2c6qhkEyp:o6T9tmTBP1TrTkF7uALniNsojZnwyaaU
- TLSH T122F407C960B64698EFE5363910312FB64D28BFA617DF7DFF32E23A14123C940961962D
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Setup.exe
Resource
win10v2004-20260513-en
13 signatures
300 seconds
Behavioral task
behavioral2
Sample
Setup.exe
Resource
win10ltsc2021-20260513-en
16 signatures
300 seconds
Behavioral task
behavioral3
Sample
Setup.exe
Resource
win11-20260513-en
15 signatures
300 seconds
Malware Config
Targets
-
- Target Setup.exe
- Size 719KB
- SHA256 35a13d030bfba6eefd0b668a818987345d9ad4ccf28027f4221ae7ebe30b0c83
- MD5 410d5a8e676d57b2a11a40aa496c8f6e
- SHA1 c572b6cac05c27973194f8a1a2fb9a576dce0ce2
- SHA512 02b36cd3f4a0a23dc9ae6a83a2a0f57e95d4be147d4ba8f21386184d513344fbfd6fd9ad194ed49ee737672bfb7b21448e9d4710f86f07a29c443d6f2237c7be
- SSDEEP 12288:o6J59t2JTBP1TrTk087uU0F8zYkLe4riNsRCjZnwyJaJtm2c6qhkEyp:o6T9tmTBP1TrTkF7uALniNsojZnwyaaU
- TLSH T122F407C960B64698EFE5363910312FB64D28BFA617DF7DFF32E23A14123C940961962D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
3Credentials In Files
3