General
- Target backup_svc-release.exe
- Size 28.6MB
- Sample260825-wtzvyaxbre
- SHA256 7f5c3d6bb064a19bc4d5e332f258824cbf3e256069eee4c11b23be5d799a4d18
- MD5 ca6dafae38223c969ec291c3ee80fcc8
- SHA1 77710636970c0fd2d3103429b56533646b3c2ccf
- SHA512 99c34de074ecfc5d474797aec78b964e6d66d42da272173fe947821a816b181f26678cca791312d8fffc90875f0a461efb55ccba1d21a407c8cfee5944f3a94f
- SSDEEP 393216:WpIVBsSI1XVSXSzBXK0yWYah9O3K9blmorcZP:Wy/SzByWYH3
- TLSH T1C0678F57A2A5ACDFC86FE274A2CBA325F6347C408B33299B590086752D677D05F3EB04
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
backup_svc-release.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
backup_svc-release.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target backup_svc-release.exe
- Size 28.6MB
- SHA256 7f5c3d6bb064a19bc4d5e332f258824cbf3e256069eee4c11b23be5d799a4d18
- MD5 ca6dafae38223c969ec291c3ee80fcc8
- SHA1 77710636970c0fd2d3103429b56533646b3c2ccf
- SHA512 99c34de074ecfc5d474797aec78b964e6d66d42da272173fe947821a816b181f26678cca791312d8fffc90875f0a461efb55ccba1d21a407c8cfee5944f3a94f
- SSDEEP 393216:WpIVBsSI1XVSXSzBXK0yWYah9O3K9blmorcZP:Wy/SzByWYH3
- TLSH T1C0678F57A2A5ACDFC86FE274A2CBA325F6347C408B33299B590086752D677D05F3EB04
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Obfuscated Files or Information: Command Obfuscation
Adversaries may obfuscate content during command execution to impede detection.