General
- Target 1.exe
- Size 6.2MB
- Sample260727-apgynstbmf
- SHA256 23bec473632af324b0a271f6b0575ea3d3174af7042ee5d582cb739714a35af8
- MD5 0ee75701ce17b06439a5f1bb200b5a8f
- SHA1 e1e8555a0518ba4bc0cea2c8e89c046a11059867
- SHA512 1a8ead60838e7b5bbb5db6716a15d7f863509736c415ebaa1d5561c36378f570f1ee9e6e9e7912878863ad5bf00a9e9a53478ce4cd5d231bcd36b16337c9814f
- SSDEEP 49152:PIk8ghPFhi6oM5ZWkGsXGV/lSIdyOan9123STY:Zbxs1
- TLSH T1AB668C349E9801A4D466D634B6738232D6707872F7F3A58B3698C2073E379919B7BF12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
1.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
1.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 1.exe
- Size 6.2MB
- SHA256 23bec473632af324b0a271f6b0575ea3d3174af7042ee5d582cb739714a35af8
- MD5 0ee75701ce17b06439a5f1bb200b5a8f
- SHA1 e1e8555a0518ba4bc0cea2c8e89c046a11059867
- SHA512 1a8ead60838e7b5bbb5db6716a15d7f863509736c415ebaa1d5561c36378f570f1ee9e6e9e7912878863ad5bf00a9e9a53478ce4cd5d231bcd36b16337c9814f
- SSDEEP 49152:PIk8ghPFhi6oM5ZWkGsXGV/lSIdyOan9123STY:Zbxs1
- TLSH T1AB668C349E9801A4D466D634B6738232D6707872F7F3A58B3698C2073E379919B7BF12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects AnimateClipper
-
Family: AnimateClipper
AnimateClipper is a Windows crypto clipper that hijacks the clipboard to swap wallet addresses.
-
Executes dropped EXE
-
Adds Run key to start application
-
Suspicious use of SetThreadContext