General
- Target 2.exe
- Size 7.9MB
- Sample260729-am335ach76
- SHA256 407aaecabee599cb29dbb3cf177ed77b67f65d63f456c7abeda5834c0d36ed5f
- MD5 08111e5e77d43943ccca53b3ff9d88ab
- SHA1 7939868adf7745235dfee34a557a50314ce9352f
- SHA512 885fde654e2b1b75e15c28c99abbbc0bb7559e8443d1466818aa66d608f64859babec044e28eb2aa2d63cb6c8a0b270d48e6d4b4d41ee378cfc359278efef5be
- SSDEEP 49152:YsibjnJ/wvmYovBITLm0fkL+8iYWQ1SE61ki:4J8wHcr
- TLSH T16986AD1FA2AB15ACE127DA38CA617232D6B1F8460361A58F0658D2F51F33B909F7F315
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2.exe
- Size 7.9MB
- SHA256 407aaecabee599cb29dbb3cf177ed77b67f65d63f456c7abeda5834c0d36ed5f
- MD5 08111e5e77d43943ccca53b3ff9d88ab
- SHA1 7939868adf7745235dfee34a557a50314ce9352f
- SHA512 885fde654e2b1b75e15c28c99abbbc0bb7559e8443d1466818aa66d608f64859babec044e28eb2aa2d63cb6c8a0b270d48e6d4b4d41ee378cfc359278efef5be
- SSDEEP 49152:YsibjnJ/wvmYovBITLm0fkL+8iYWQ1SE61ki:4J8wHcr
- TLSH T16986AD1FA2AB15ACE127DA38CA617232D6B1F8460361A58F0658D2F51F33B909F7F315
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects AnimateClipper
-
Family: AnimateClipper
AnimateClipper is a Windows crypto clipper that hijacks the clipboard to swap wallet addresses.
-
Executes dropped EXE
-
Adds Run key to start application
-
Suspicious use of SetThreadContext