General
- Target rewind-0f87d9c8.exe
- Size 19.4MB
- Sample260804-cjvnpabc78
- SHA256 af35683fdca7ab9cfa413ac7152b6fdaa428cf3b266798e4d561c25ef0606f50
- MD5 d39f1ebf6627f3cc98f050244a1d9faa
- SHA1 c69c7dbf7dc776fae8d5a1c0416a8b4c41835444
- SHA512 79402ab32cf12daa44ac2b6aaef59b172d398bc37266a0b1b3a40e23563fe5149c48edd4ed4a423735f04a983025dfe05b96b8e09383ab2b45d17370eedfeca6
- SSDEEP 393216:1wqPpFlroEAmURLAD1B3sB1TnpDgzCokFIvWMgrYqk:1wqdodmUJAD1GB1dDgz66ejMl
- TLSH T1362733287B94409AFECB613F617284C2A3E3B29A1B10C9DF0B9C53953E7B5E21D3D954
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
rewind-0f87d9c8.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target rewind-0f87d9c8.exe
- Size 19.4MB
- SHA256 af35683fdca7ab9cfa413ac7152b6fdaa428cf3b266798e4d561c25ef0606f50
- MD5 d39f1ebf6627f3cc98f050244a1d9faa
- SHA1 c69c7dbf7dc776fae8d5a1c0416a8b4c41835444
- SHA512 79402ab32cf12daa44ac2b6aaef59b172d398bc37266a0b1b3a40e23563fe5149c48edd4ed4a423735f04a983025dfe05b96b8e09383ab2b45d17370eedfeca6
- SSDEEP 393216:1wqPpFlroEAmURLAD1B3sB1TnpDgzCokFIvWMgrYqk:1wqdodmUJAD1GB1dDgz66ejMl
- TLSH T1362733287B94409AFECB613F617284C2A3E3B29A1B10C9DF0B9C53953E7B5E21D3D954
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.