General
- Target gM9anpOuZNKX8zHj.exe
- Size 2.9MB
- Sample260801-g3f2vszcrc
- SHA256 2804f625bda3a9b17c21df3bda03807ba0dc74c4c7c3333f59a5c18c7497858b
- MD5 53b7d64e827f66ef11fc6f14963e7681
- SHA1 7e6cb6f7263da1a97b8efabe4b46a6642e5eb840
- SHA512 ee9c9b8afda1026732cd9f01e1b1f01a4664936eaaa537e09f0e68bfc4e140680501c205ae697f577736b86698d0640996c76498167873e93fe6af2c41983e80
- SSDEEP 49152:xCmWwcxavhd5l6PAb8dReRThheAj+CMsRboNP1V70GQtAzqFhDTKGBI4I6vma3X:xj2A5oGHhRor70GKJvDTu63X
- TLSH T14AD522CEFDE27234E47AC3B7429375AEB029778442209D5E72C82B106D935287C7B769
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
gM9anpOuZNKX8zHj.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
gM9anpOuZNKX8zHj.exe
Resource
win11ltsc2024-20260710-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target gM9anpOuZNKX8zHj.exe
- Size 2.9MB
- SHA256 2804f625bda3a9b17c21df3bda03807ba0dc74c4c7c3333f59a5c18c7497858b
- MD5 53b7d64e827f66ef11fc6f14963e7681
- SHA1 7e6cb6f7263da1a97b8efabe4b46a6642e5eb840
- SHA512 ee9c9b8afda1026732cd9f01e1b1f01a4664936eaaa537e09f0e68bfc4e140680501c205ae697f577736b86698d0640996c76498167873e93fe6af2c41983e80
- SSDEEP 49152:xCmWwcxavhd5l6PAb8dReRThheAj+CMsRboNP1V70GQtAzqFhDTKGBI4I6vma3X:xj2A5oGHhRor70GKJvDTu63X
- TLSH T14AD522CEFDE27234E47AC3B7429375AEB029778442209D5E72C82B106D935287C7B769
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.