General
- Target 𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏.zip
- Size 1.4MB
- Sample260810-nqscpaxeqf
- SHA256 720ff6007f9dec068512aebb3b62712cfd872702a528d4771d43c493289bfca6
- MD5 966cc7be94e86b1d5b742f02d56363ee
- SHA1 5489e139e8b081dc7944847ac8c61c4dc6f6154a
- SHA512 d0388d65a91a5f7a71ff27fc688aad47f87b312334e14ed1251d11399210677e6173b067d470ea6b80a9d3bf70aeba446f9d262e4b30e71391633bd8e00741e2
- SSDEEP 24576:EfVp/HY0I925OCPeO0gjwvbnDJEl6ujONXD2tXpBKj1mOc:0f/BI9WXMAl6EONQ5+1m1
- TLSH T1DF65334E08DBB8B4AF72AEC70198B52476B63DE3C45767E4F39FB2DF48469209904670
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
setup.exe
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target setup.exe
- Size 4.2MB
- SHA256 b7f25e6a139e41b409bca16855a6d907f2ee2ab66b19f89b4c65f1c758fd5f1e
- MD5 0f4072a1774ee421890e5fa3d8faba13
- SHA1 9a36a0fc19efccc83dc63395d1f0fa142d7b2567
- SHA512 3ad5eedc355fa2a82082102c0829a8d12c8ea9b2a894b46d17710705009ab9c2c6c81f07bc73ed9680c52705b72695093dfd313b9c2402edfe2063ab88b85363
- SSDEEP 49152:lvCG6qOW/dMgGgodcdqtRwZUPN6bQpsJQq0:5fnOW/d4/mUP7p/J
- TLSH T12D162800EECB44F2D4472A30A0EB636F6738AD051F36DB67EF543A79E9772910876648
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
3Credentials In Files
3