General
- Target 𝐒𝐄𝐓𝐔𝐏.exe
- Size 12.7MB
- Sample260903-pcckrasvgw
- SHA256 3b1bb011cab1488869aa1db821881110750262a96f37ae22c61f8ef973fa343c
- MD5 9ce7f6815c1f37978be788bd7b73ddbe
- SHA1 94626b4c5851a14a5a823494eb29eccb1bb2eb83
- SHA512 f046313fa1a5c412c3ae8fe82d3c2b34e6d10f0941f38c1fe11a6eb33858c4a5f1a16ed21aaf8e493a3040dc12e24bea58a8548190b09f75a276092eb4afd930
- SSDEEP 393216:maLJvvtSRl8U2lPklvIRU/wdl1gQvVxvBGULAbFwdP7Idauwzts2Alk59bj45sLL:vue5+lc
- TLSH T111D62A83AA4A04E6C5819B39C0775E31BAADB84ED73037B71E50D6742F223D0A97974F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
𝐒𝐄𝐓𝐔𝐏.exe
Resource
win10v2004-20260513-en
17 signatures
300 seconds
Behavioral task
behavioral2
Sample
𝐒𝐄𝐓𝐔𝐏.exe
Resource
win10ltsc2021-20260513-en
17 signatures
300 seconds
Behavioral task
behavioral3
Sample
𝐒𝐄𝐓𝐔𝐏.exe
Resource
win11-20260513-en
18 signatures
300 seconds
Behavioral task
behavioral4
Sample
𝐒𝐄𝐓𝐔𝐏.exe
Resource
win11ltsc2024-20260709-en
0 signatures
300 seconds
Malware Config
Targets
-
- Target 𝐒𝐄𝐓𝐔𝐏.exe
- Size 12.7MB
- SHA256 3b1bb011cab1488869aa1db821881110750262a96f37ae22c61f8ef973fa343c
- MD5 9ce7f6815c1f37978be788bd7b73ddbe
- SHA1 94626b4c5851a14a5a823494eb29eccb1bb2eb83
- SHA512 f046313fa1a5c412c3ae8fe82d3c2b34e6d10f0941f38c1fe11a6eb33858c4a5f1a16ed21aaf8e493a3040dc12e24bea58a8548190b09f75a276092eb4afd930
- SSDEEP 393216:maLJvvtSRl8U2lPklvIRU/wdl1gQvVxvBGULAbFwdP7Idauwzts2Alk59bj45sLL:vue5+lc
- TLSH T111D62A83AA4A04E6C5819B39C0775E31BAADB84ED73037B71E50D6742F223D0A97974F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of SetThreadContext