General
- Target 3.exe
- Size 10.9MB
- Sample260731-p7mdfagm8z
- SHA256 5ee86cbcd296e0998ca20ee65a7506fb3baecfb7ce98eede29bff1a6a6e0fc95
- MD5 b8d28b59c891a75a318dee8dc16dbcdd
- SHA1 745ec020a3fae9e24921579370010fd28f9bd25f
- SHA512 7231590d6121d7ba1b10eefc1a232f4d363bdde257eb40a0a613cba13b4e0ba5d059d5b6c36c526c327278d98a8174ca58c62db4a6f49b85ab7a13e4f226bb49
- SSDEEP 24576:F9fuOb193YKMT7iCtQ4bDfWbZkFSdU27PTCuOH/YIY9Ib8qkqKSPLftRNg+au1nj:F9fbb193O7zmZIavTNOrY9kFRNl1vfVN
- TLSH T1B5B68C1DA29801E8E6779A388AE37E32D7717846076DA98B0758F2053F33AD05B7F315
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
3.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 3.exe
- Size 10.9MB
- SHA256 5ee86cbcd296e0998ca20ee65a7506fb3baecfb7ce98eede29bff1a6a6e0fc95
- MD5 b8d28b59c891a75a318dee8dc16dbcdd
- SHA1 745ec020a3fae9e24921579370010fd28f9bd25f
- SHA512 7231590d6121d7ba1b10eefc1a232f4d363bdde257eb40a0a613cba13b4e0ba5d059d5b6c36c526c327278d98a8174ca58c62db4a6f49b85ab7a13e4f226bb49
- SSDEEP 24576:F9fuOb193YKMT7iCtQ4bDfWbZkFSdU27PTCuOH/YIY9Ib8qkqKSPLftRNg+au1nj:F9fbb193O7zmZIavTNOrY9kFRNl1vfVN
- TLSH T1B5B68C1DA29801E8E6779A388AE37E32D7717846076DA98B0758F2053F33AD05B7F315
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects AnimateClipper
-
Family: AnimateClipper
AnimateClipper is a Windows crypto clipper that hijacks the clipboard to swap wallet addresses.
-
Executes dropped EXE
-
Adds Run key to start application
-
Suspicious use of SetThreadContext