03348e712bd0289fb38580ffc49b66393b8079e6da00e922d4882bc1bf3d631b

Resubmissions

02/08/2026, 22:34

260802-2hdffsgn8s7

02/08/2026, 22:32

260802-2f4vmagn717

Sharing

Copy URL Twitter E-mail

General

Target
SETUP_FILE_(PASS_2003).zip
Size 1.3MB
Sample260802-2hdffsgn8s
SHA256 03348e712bd0289fb38580ffc49b66393b8079e6da00e922d4882bc1bf3d631b
MD5 abcaffef9f6c837c014028b77f321b24
SHA1 7edf7b7b9214b1f978ac5f48256e0ced016ee9c9
SHA512 d0b061e807f2614a120f403d338a2754f89df347dc3a0e26e030eb58343e3664ffaf1b15904cc675354886a0685f97d2560d1ddc1a4a25c5b69abedeb4a07e84
SSDEEP 24576:G+o4PxeZyWK3sp+6TlhRYsOfanYGYQce7Pfym7M+9Z31yQuZ1439MmNmC/m0DIfI:GT6Wtp+65hsfgYGYcJ9ZFu14NJNEnw
TLSH
T1C555333EB382021B13AC02A4E3475ACC469F95EF0459C529576B6C7D233C7AABFB5C58
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  SETUP_FILE_(PASS_2003).zip
- Size 1.3MB
- SHA256 03348e712bd0289fb38580ffc49b66393b8079e6da00e922d4882bc1bf3d631b
- MD5 abcaffef9f6c837c014028b77f321b24
- SHA1 7edf7b7b9214b1f978ac5f48256e0ced016ee9c9
- SHA512 d0b061e807f2614a120f403d338a2754f89df347dc3a0e26e030eb58343e3664ffaf1b15904cc675354886a0685f97d2560d1ddc1a4a25c5b69abedeb4a07e84
- SSDEEP 24576:G+o4PxeZyWK3sp+6TlhRYsOfanYGYQce7Pfym7M+9Z31yQuZ1439MmNmC/m0DIfI:GT6Wtp+65hsfgYGYcJ9ZFu14NJNEnw
- TLSH
  T1C555333EB382021B13AC02A4E3475ACC469F95EF0459C529576B6C7D233C7AABFB5C58
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  PASSW0RD.png
- Size 21KB
- SHA256 a791c6e17ce50fda6b94298a8aba8c8a387ccc2ed96eff3861ea7f04684cb148
- MD5 6dfe6f3893c5fbe28b0bb7fd0a8a8b40
- SHA1 7703d74952786138dedb366ef90a7b4fd286b6f6
- SHA512 b499c847fbecc6c476353579c396319666d59514768651e6223dcb5e8cc97f9c27fd0217fe819cd37346517049b54c152f3555e2aea3a8995daea9d4f5a9804d
- SSDEEP 384:0m8m8m8m8m8m8m8m8m8m8m8m8m8m8m8m8riHfDSoPlYx3HAGq9zKE9FRP1aftHGJ:f3333333333333338MlYL4uWFRP1afNK
- TLSH
  T18BA25F4AD746487BB32E981B7C0200738A845D33B496DE9525CB7B5F4B17FB88C3AE85
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  𝟎𝙋𝙀𝙉_𝙎𝙀𝙏𝙐𝙋.zip
- Size 1.3MB
- SHA256 c9d7b53725a85d3ad4ef5f2b33db7989de137585af3841f7071b602bd36053d9
- MD5 f0c4e40df7ebdd511af1f9c6f1591e8c
- SHA1 f59087607c0df59051836be01dacfc9a6ead56a3
- SHA512 6858b8ecd731920f6940617922a347958133590a529537a4066090934d0c3fd079875bd9639c66c5bc00edd1f742f5c2ae6f576487840891056f698894e18176
- SSDEEP 24576:D+o4PxeZyWK3sp+6TlhRYsOfanYGYQce7Pfym7M+9Z31yQuZ1439MmNmC/m0DIfD:DT6Wtp+65hsfgYGYcJ9ZFu14NJNEnr
- TLSH
  T1BC55333EB282021F13BC0299D3475ACC469F95EF0459C42957A76C7D223C7AABFB9C58
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  SETUP.zip
- Size 1.3MB
- SHA256 1b5246f606cf9bf74c1aa26c1dce6860d25e1676e9d0d73d9221fa02c8fb59ae
- MD5 1154d70923c70d822b168a7a50da7bee
- SHA1 8cf4b9eba50f4c387ae2434896750fb94aaceea5
- SHA512 f27bfe2aeb0c4a32aaf89f3339b630ae7f16e20d445ef8e2341333d663bd0588a6f12d3be06ce2ca946a619ea15e28850268ec6b11eeddb70f1b29f0eb94d5e5
- SSDEEP 24576:tG3g1E3MlD55bVqPH6Y6411KG/A913f0MhjdVTf5RHu9UaFqPrdmJVS1ZImceaR:k3g1SMpfVqPaYv11KG/y3dVTBROunPr6
- TLSH
  T12A5533A7F6B1FD981C7160F6F2155C5642A9F4B820818E2054BEBAEC46290BBD75F0CF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Setup.exe
- Size 3.2MB
- SHA256 6fd0c7b03b53ba0a9c59145888aa1eefe2dfd87233074f2c226ffd4dfff2f022
- MD5 d597b63f12bf7b1ce35454e575cca055
- SHA1 67e24f1591e67960509c24d95d5646ee0210d3d7
- SHA512 4d787361b139bfff729695a4301a2cdbf43c64f5e4a45d52d58e71dfdac32dfc163195ea6ba715e0f5873b479154ef2fd03af2a054c74c968fa0c7794011913d
- SSDEEP 49152:iNOnxS0kx8W+7z4mAwGfEy20JIT+ZRY5hUwbQS0:wixS0kx+7h+Zz/S
- TLSH
  T1EEF55C02FEC784F6D5476A3594EB627F2338A9040B35D753EF443ABAE9772920833649
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery spyware stealer
- Reads user/profile data of local email clients
  Email clients store some user data on disk where infostealers will often target it.
  spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral10 behavioral9