General
- Target 28ef8c2974c7243a8f9b44a617ddff52212d976935714fc497fec5705724d9ca
- Size 768KB
- Sample260830-1p73za1bja
- SHA256 28ef8c2974c7243a8f9b44a617ddff52212d976935714fc497fec5705724d9ca
- MD5 7fcc2d89548ebe777a5b996b0839b657
- SHA1 c43366f8cfae1f221a5de6844762dcabbc3d536a
- SHA512 a7cd3b07f68e1ae06c4991d409cab7c0a15e2e8723076f56dabbef6ea80bad8dfd2765cba72d9882286f14741737189b1b27b521b4c93e4249418060352c03f8
- SSDEEP 12288:3uf+X1/+KgM1Ig/+6Sh6/d1xYOEYZfRzJukGDgFC0yNkWQ/jyo0Ajv6VsXlGG25M:eqNeM1IgGh6l1xYMRzQkKCF71jvrGG2
- TLSH T14DF402763FCC60F6F0B786348C6406D68B72B8B583A196AF239582451F176754C3AF39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
28ef8c2974c7243a8f9b44a617ddff52212d976935714fc497fec5705724d9ca.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 28ef8c2974c7243a8f9b44a617ddff52212d976935714fc497fec5705724d9ca
- Size 768KB
- SHA256 28ef8c2974c7243a8f9b44a617ddff52212d976935714fc497fec5705724d9ca
- MD5 7fcc2d89548ebe777a5b996b0839b657
- SHA1 c43366f8cfae1f221a5de6844762dcabbc3d536a
- SHA512 a7cd3b07f68e1ae06c4991d409cab7c0a15e2e8723076f56dabbef6ea80bad8dfd2765cba72d9882286f14741737189b1b27b521b4c93e4249418060352c03f8
- SSDEEP 12288:3uf+X1/+KgM1Ig/+6Sh6/d1xYOEYZfRzJukGDgFC0yNkWQ/jyo0Ajv6VsXlGG25M:eqNeM1IgGh6l1xYMRzQkKCF71jvrGG2
- TLSH T14DF402763FCC60F6F0B786348C6406D68B72B8B583A196AF239582451F176754C3AF39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects MaskGramStealer payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of SetThreadContext