General
- Target wifi_grabber.exe
- Size 15.2MB
- Sample260808-31jkvsfh63
- SHA256 9b31aecf842404253bc78091afbb347383898574c7287ec5db33f017de186af6
- MD5 a6e68f727fe78198a727f4ee71aa1dcf
- SHA1 b3b23c0bef9ef70a77190fda5890320f354b0ea4
- SHA512 7eea67690ce065360be59a02deb7dbae5a366de9aed39cfbd8b95277b76c80a46c790b94d177bab6239e7b87b526586f9ad3210224931a9aa34d12a420f2a543
- SSDEEP 393216:NuDBBc02mfCS+azW+tHjdO15LyWQvKOeGpB4VtAz:4Tc4aS+aW+NjILQSLGpBAtA
- TLSH T1B9F6335863540AE7E5EB543D8622E8266275FD350FA1C9FF07F892A02E632F19E35334
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
wifi_grabber.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
wifi_grabber.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Behavioral task
behavioral3
Sample
wifi_grabber.pyc
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
wifi_grabber.pyc
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target wifi_grabber.exe
- Size 15.2MB
- SHA256 9b31aecf842404253bc78091afbb347383898574c7287ec5db33f017de186af6
- MD5 a6e68f727fe78198a727f4ee71aa1dcf
- SHA1 b3b23c0bef9ef70a77190fda5890320f354b0ea4
- SHA512 7eea67690ce065360be59a02deb7dbae5a366de9aed39cfbd8b95277b76c80a46c790b94d177bab6239e7b87b526586f9ad3210224931a9aa34d12a420f2a543
- SSDEEP 393216:NuDBBc02mfCS+azW+tHjdO15LyWQvKOeGpB4VtAz:4Tc4aS+aW+NjILQSLGpBAtA
- TLSH T1B9F6335863540AE7E5EB543D8622E8266275FD350FA1C9FF07F892A02E632F19E35334
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
- Target wifi_grabber.pyc
- Size 3KB
- SHA256 c55f4822f01484fd3c9c2251279188a2e6f4841af85a182bf8aaa20798e68aa6
- MD5 a5ccf95146aa6a64473a76b0be1498d6
- SHA1 f5fb7a25b879b1dbcedf9374e9da96f66c72b546
- SHA512 3a08ec0f8e436b97f5b055ab6334af62134de86bd13c2551b7961cdb678730ffc9b33ba3e108a09735c257cdfffd2be7c20a3c23e55c7db316d001a15c4072f4
- TLSH T1E561D4ABDB544B1AFE74F9B9D0299A8C633A6FC0BC206B525E4110FDECC7904069173A
- MD5 SHA1 SHA512 TLSH
Score3/10