General
- Target 00d3f42dc0c6527d375f8b5430915ca27f0da7b9608e446d3e5f6c17082577a5.zip
- Size 1.2MB
- Sample260814-rc1cxswtbs
- SHA256 c3a30cf3b91290b938b61a6317d86dcaf482aa4c8a691ebc0fe1e90510da66df
- MD5 382ec08eb25ba8034715cb37041cca18
- SHA1 0fbab3c71b9ec673d5c028b9677835c2ce010c3f
- SHA512 1f0d93332d63d0ec545b5d41b0c01958e6f36a98f5fa79180e00af4719f832fe6875b0249647cd2bb59afe0d09c1528010cb3da13afc2fb61041dc4ee3c721bf
- SSDEEP 24576:UK3JrIIkZuI/tkckCmIFS60a+z8IUCEPEpS8zAaydFhuhiTkwNjKv0oeA:fIIkZuI/GDCbr+4gpFUF/yiNKJZ
- TLSH T10045339F83315A1D03B11A1D72578885DA803C7CAD94DA8ED23F39E79D9B4DCA639BC0
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
00d3f42dc0c6527d375f8b5430915ca27f0da7b9608e446d3e5f6c17082577a5.exe
Resource
win10v2004-20260513-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target 00d3f42dc0c6527d375f8b5430915ca27f0da7b9608e446d3e5f6c17082577a5.exe
- Size 2.5MB
- SHA256 00d3f42dc0c6527d375f8b5430915ca27f0da7b9608e446d3e5f6c17082577a5
- MD5 8489bdc975f60b73d4ab815c37b2ff5b
- SHA1 c2d00d27026118c56494bd3b2e580e9dbc1e9fff
- SHA512 0205d199548d56af3a8153fff23c8da245fb5756aabd17c314b6f9b64207ee8865cc80066f854a4ea76efaf5ef888eaa4dc8fec91da68e39648aae2c49936132
- SSDEEP 49152:2CzQQmAoIL3a/byaaNuXEGlcXexT/VE8eiZhC/Eqq:RzQbAoIra/byagMWYqcP
- TLSH T10FC55B21EEEA84F9DA031A3560A7A26F13367F045F39DFC7DF0469B4A7233A61463605
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
3Credentials In Files
3