a2d7ace49e1e93b66f2c0089053b1434212d0ece46b1d0b29f87fbcd9bfd7015

General

Target
Trezor-Suite-26.7.4-win-x64.exe
Size 150.1MB
Sample260812-wveldseb85
SHA256 a2d7ace49e1e93b66f2c0089053b1434212d0ece46b1d0b29f87fbcd9bfd7015
MD5 9b5a20fbba07ce682cc112df4a836ffe
SHA1 ac1bfb30b97a9cc1e1bb412952d09a949ab9a340
SHA512 4745db0ac059581b3f79fc6e06da06ceac1629a7e399a7e298090154a40a2b849f1599768027b190ef76e2405afeb05192405082b4c8c1927dbf3e5781f61765
SSDEEP 3145728:GVXL4i8eRXmMqDl2UVeK2bb8WxLlOKvH09LeUc8WvmoF2rpdXX0MD/0f:S4bEdq52UqnfLT8LeCMbFfMDMf
TLSH
T1217833EDE463F13EEE78227A93E84C755A77B972285414D7A1018C627324BEB0672F43
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Trezor-Suite-26.7.4-win-x64.exe
- Size 150.1MB
- SHA256 a2d7ace49e1e93b66f2c0089053b1434212d0ece46b1d0b29f87fbcd9bfd7015
- MD5 9b5a20fbba07ce682cc112df4a836ffe
- SHA1 ac1bfb30b97a9cc1e1bb412952d09a949ab9a340
- SHA512 4745db0ac059581b3f79fc6e06da06ceac1629a7e399a7e298090154a40a2b849f1599768027b190ef76e2405afeb05192405082b4c8c1927dbf3e5781f61765
- SSDEEP 3145728:GVXL4i8eRXmMqDl2UVeK2bb8WxLlOKvH09LeUc8WvmoF2rpdXX0MD/0f:S4bEdq52UqnfLT8LeCMbFfMDMf
- TLSH
  T1217833EDE463F13EEE78227A93E84C755A77B972285414D7A1018C627324BEB0672F43
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery execution spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads ssh keys stored on the system
  Tries to access SSH used by SSH programs.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Command and Scripting Interpreter: PowerShell
  Using powershell.exe command.
  execution
behavioral1 behavioral2
- Target
  $PLUGINSDIR/app-64.7z
- Size 149.6MB
- SHA256 18e8b63876594b94562587c9933822ac41698521a192cefdc92580e75a4386f8
- MD5 4afcc89f46ed3b4bb4bd9fc0d2ecefc4
- SHA1 f0b6fcf3439ee0e994a9c4342f7151e342bd5b6f
- SHA512 7878101aa2b9946a0847c26ba2aad53b9296ee5db7fa3b89b03d43d8536e716862974ac1366c577f3f9936c46ff93933dacaad709f8b58979136d14877a173f8
- SSDEEP 3145728:+XL4i8eRXmMqDl2UVeK2bb8WxLlOKvH09LeUc8WvmoF2rpdXX0MD/0B:U4bEdq52UqnfLT8LeCMbFfMDMB
- TLSH
  T1037833EDE467F13EEE78227AD3E85C745A377972289414D7A1018C62A314BEB0672F43
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4