General
- Target secondfast.exe
- Size 539KB
- Sample260903-vdhfaack8t
- SHA256 1c852cc5ab0847f57908869ad14b2c1385bec46a8377f67b779aada5a5d59dc0
- MD5 1c17489d4bf43f077ba749f2d8b3077d
- SHA1 53463b42aeab2ea25d9b3ff639d3fef0323aa1c3
- SHA512 c56fde611b56dea2f60cdf1b62e55e7c7ee241e93dec9e2d10dfa2a2866e2d7a884610daeb41287c15e65de9a3bad490dfb42767ac03854ebb1f9479eb748bc6
- SSDEEP 6144:oSZgV/h/3pFiPAHRzb3fV6PmHbksHvIxzdS+u+N08Z3oe44AagjJFosZZbrjJwq0:1WhXvHh3dbVHXnAi4Avjro6bnJwu
- TLSH T161C4F117BBD805FEC056C37E99950531A6B2B8121BA497EF47A402170F6BBD06FBEB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
secondfast.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
secondfast.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target secondfast.exe
- Size 539KB
- SHA256 1c852cc5ab0847f57908869ad14b2c1385bec46a8377f67b779aada5a5d59dc0
- MD5 1c17489d4bf43f077ba749f2d8b3077d
- SHA1 53463b42aeab2ea25d9b3ff639d3fef0323aa1c3
- SHA512 c56fde611b56dea2f60cdf1b62e55e7c7ee241e93dec9e2d10dfa2a2866e2d7a884610daeb41287c15e65de9a3bad490dfb42767ac03854ebb1f9479eb748bc6
- SSDEEP 6144:oSZgV/h/3pFiPAHRzb3fV6PmHbksHvIxzdS+u+N08Z3oe44AagjJFosZZbrjJwq0:1WhXvHh3dbVHXnAi4Avjro6bnJwu
- TLSH T161C4F117BBD805FEC056C37E99950531A6B2B8121BA497EF47A402170F6BBD06FBEB10
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of SetThreadContext