Overview
overview
7Static
static
3SETUP_FILE...4).zip
windows10-2004-x64
1SETUP_FILE...4).zip
windows11-ltsc_2024-x64
1PASS KEY.png
windows10-2004-x64
1PASS KEY.png
windows11-ltsc_2024-x64
1𝟎𝐏�...��.zip
windows10-2004-x64
1𝟎𝐏�...��.zip
windows11-ltsc_2024-x64
1SETUP.zip
windows10-2004-x64
1SETUP.zip
windows11-ltsc_2024-x64
1setup.exe
windows10-2004-x64
7setup.exe
windows11-ltsc_2024-x64
7General
- Target SETUP_FILE_(PASS_KEY=2114).zip
- Size 1.4MB
- Sample260812-sy5efade73
- SHA256 76b6f1f0d24ca319e19e4ac99b003060026db129618b2c9ddfd4068a50794b83
- MD5 9fb55171f9a8338f6b16a1ab37112be9
- SHA1 b75dd67554695a5ca919044f408a04eacfcf4475
- SHA512 8dc0a9311e411d2cce22f9b1afe21eb97b823b1de2599512b6bf40e8682022ad2141d13a87a08264ece87b633dc8f495028488bd32be534dcfdfba1c93e90691
- SSDEEP 24576:Xa6n1ERKSzVrgn/ezPI298PnuFXsMEku6Kcfyfokhe44biN/nMrZUDJVB7MEikq:XBn1ERTrgGT9H9fhkzMg/FMnkq
- TLSH T110653368F9CD5287FE5819226A94020EA0E6805DBF17F93A8794707477CE4DE23CB5B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
SETUP_FILE_(PASS_KEY=2114).zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
SETUP_FILE_(PASS_KEY=2114).zip
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
PASS KEY.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
PASS KEY.png
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏.zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏.zip
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
SETUP.zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
SETUP.zip
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
setup.exe
Resource
win10v2004-20260513-en
Malware Config
Targets
-
- Target SETUP_FILE_(PASS_KEY=2114).zip
- Size 1.4MB
- SHA256 76b6f1f0d24ca319e19e4ac99b003060026db129618b2c9ddfd4068a50794b83
- MD5 9fb55171f9a8338f6b16a1ab37112be9
- SHA1 b75dd67554695a5ca919044f408a04eacfcf4475
- SHA512 8dc0a9311e411d2cce22f9b1afe21eb97b823b1de2599512b6bf40e8682022ad2141d13a87a08264ece87b633dc8f495028488bd32be534dcfdfba1c93e90691
- SSDEEP 24576:Xa6n1ERKSzVrgn/ezPI298PnuFXsMEku6Kcfyfokhe44biN/nMrZUDJVB7MEikq:XBn1ERTrgGT9H9fhkzMg/FMnkq
- TLSH T110653368F9CD5287FE5819226A94020EA0E6805DBF17F93A8794707477CE4DE23CB5B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target PASS KEY.png
- Size 7KB
- SHA256 4c98958e90393ded39b89bc5339fc9d8de31732403e9b37739eaaadfc59ad6e2
- MD5 6e7a7594ac43cc9f0d9a38626687e33c
- SHA1 18f3f0402c96b1337006968dca9575f9a8fe2059
- SHA512 2ffdf448bdd5ceaee7fbe8e32f3685ba5759c1063c6eb93aff79e572c8f05dc53f4b512a9f74c161fb0833d989c96bcf28a0e187ecc97dc13f98dd0451828c47
- SSDEEP 192:SS4SSSSSSStSSSSSSSL3X3K2BN3DrFLIUrEUoA4SkqFJSSSSSSSSgSSSSSSSSSSi:SS4SSSSSSStSSSSSSSL3HKIN33FUUrEw
- TLSH T1A8E18E92D396C99BC068D161F1A73E9C10F5274AF1F0DB5A90570BBC3228D3BEE96582
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target 𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏.zip
- Size 1.3MB
- SHA256 da1687474ece6ff9c0561a0c06f5d16445da9238507242f4c156b5e3ed0425ee
- MD5 640ecc057dd9fdd347cc8e418aa4284e
- SHA1 0710ca08fa2ff297dcc10425dfcc2c0fda2891d3
- SHA512 5dde10c070f65f1e0b7529f53e4108aad67e8168cce5f2d68cf93d4834ad948b529f6d19ed9196e904d4aeee795a9bae634a99fc5b0fd07e6a16ee4756aa1651
- SSDEEP 24576:wo6T1IzKy39rcLVenvI29QPxuFXYMIUu4KcRyfASpo42bkN/FKrZU1JpB7GEik:wrT1IzVrcE39pvRpSvKc3FGnk
- TLSH T15F653368F9CD428BFE5819126A54020EA0EA805DAF17F93E8794707477CE4DE63CB5B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target SETUP.zip
- Size 1.4MB
- SHA256 686c4245724b8bc07ad5084c4904eea27efa72b3abc63021251a6bd45382acf1
- MD5 898f90837dba0ae3ae78b7808fd82a35
- SHA1 d1861930f2c7d75a299af7ff69734f2412fdec0e
- SHA512 cb66fa316852400cae29370ba20aa3caf1f46a703a2603ac8f8b5002ac4e808ff0aa8a82aca498a871ca8d6e7c8b0f2ca9f88fa2a37a1bb4a61b57b40c5ec888
- SSDEEP 24576:By8yETEPvgovZhhE/nlqM9kanzPxUdrQnUv3AtTSyQ8oDNtjFJEYRE0erlkKE:BybtPvgovZhGjnTxYrQnUv3UTjQ/xtjT
- TLSH T10065332735D46BA1701764305AEF17AE391C6B67B07EB255CCD1C139D03A372CA35B8A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target setup.exe
- Size 4.7MB
- SHA256 f1cb8444675f9a1e517ec3f81bc1344ff98223d25842eb3c72d75b455c9d1fe5
- MD5 12cd966cf7b04a60b6ec4294b7926c32
- SHA1 1ec35df95ddd57518ae9f882a0d1db8c901c65dc
- SHA512 298791cc65f103f8a01907b45ea6a585bcccef0e5cee03d6f8a80310ada314fc19ce99fe1dd64cf1d922341308b84f7eb0c6bf92c337eb1c4eefbb5add74939d
- SSDEEP 49152:wjY3YtNUtDs77I6INLjDYwoJD59Gtm7bQxKxZbE:w7tNU1KMhg9stxoZo
- TLSH T19C363A11EECA84F6E4032A3550E763AF233DA9054F369B53EE54397AEA736921C33744
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Accesses cryptocurrency files/wallets, possible credential harvesting
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
3Credentials In Files
3