General
- Target SETUP_FILE_(PASS_2003).zip
- Size 1.3MB
- Sample260802-2f4vmagn71
- SHA256 03348e712bd0289fb38580ffc49b66393b8079e6da00e922d4882bc1bf3d631b
- MD5 abcaffef9f6c837c014028b77f321b24
- SHA1 7edf7b7b9214b1f978ac5f48256e0ced016ee9c9
- SHA512 d0b061e807f2614a120f403d338a2754f89df347dc3a0e26e030eb58343e3664ffaf1b15904cc675354886a0685f97d2560d1ddc1a4a25c5b69abedeb4a07e84
- SSDEEP 24576:G+o4PxeZyWK3sp+6TlhRYsOfanYGYQce7Pfym7M+9Z31yQuZ1439MmNmC/m0DIfI:GT6Wtp+65hsfgYGYcJ9ZFu14NJNEnw
- TLSH T1C555333EB382021B13AC02A4E3475ACC469F95EF0459C529576B6C7D233C7AABFB5C58
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Setup.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target Setup.exe
- Size 3.2MB
- SHA256 6fd0c7b03b53ba0a9c59145888aa1eefe2dfd87233074f2c226ffd4dfff2f022
- MD5 d597b63f12bf7b1ce35454e575cca055
- SHA1 67e24f1591e67960509c24d95d5646ee0210d3d7
- SHA512 4d787361b139bfff729695a4301a2cdbf43c64f5e4a45d52d58e71dfdac32dfc163195ea6ba715e0f5873b479154ef2fd03af2a054c74c968fa0c7794011913d
- SSDEEP 49152:iNOnxS0kx8W+7z4mAwGfEy20JIT+ZRY5hUwbQS0:wixS0kx+7h+Zz/S
- TLSH T1EEF55C02FEC784F6D5476A3594EB627F2338A9040B35D753EF443ABAE9772920833649
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
3Credentials In Files
3