General
- Target Bruteforce-Forgotten-Crypto-Wallets.exe
- Size 81.1MB
- Sample260910-shqw4sdk71
- SHA256 f43ec5a858c109e0f71b9be00d184086f83805b4c493252abe9212265964eef0
- MD5 a8fe7ad11a425105eeeb4b9fa34f03ce
- SHA1 3b48977f1c463544179007f6519f2417357c90a6
- SHA512 46dd5e744a1032b49dcbf46128abf7d3ddf5bac2ef1466d913715e3265b2718e458e136a9c960f16c25fad24259bfb717594bf29892ee1366f37f6159cc3977b
- SSDEEP 1572864:dJl+n6H2GlP9TcZYDf1IYiQSRkEv6LJAWld6CSUc97WpQrOptIeKKV34pC:dqn6H2G7b/9GkBNADCS5aQrOptcEoE
- TLSH T1D61833039E8EA617DC6A8D3B054319FE1AE4F47152B08EAFE11C919B8B2D81DD49F4C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Bruteforce-Forgotten-Crypto-Wallets.exe
Resource
win10v2004-20260513-en
11 signatures
900 seconds
Malware Config
Targets
-
- Target Bruteforce-Forgotten-Crypto-Wallets.exe
- Size 81.1MB
- SHA256 f43ec5a858c109e0f71b9be00d184086f83805b4c493252abe9212265964eef0
- MD5 a8fe7ad11a425105eeeb4b9fa34f03ce
- SHA1 3b48977f1c463544179007f6519f2417357c90a6
- SHA512 46dd5e744a1032b49dcbf46128abf7d3ddf5bac2ef1466d913715e3265b2718e458e136a9c960f16c25fad24259bfb717594bf29892ee1366f37f6159cc3977b
- SSDEEP 1572864:dJl+n6H2GlP9TcZYDf1IYiQSRkEv6LJAWld6CSUc97WpQrOptIeKKV34pC:dqn6H2G7b/9GkBNADCS5aQrOptcEoE
- TLSH T1D61833039E8EA617DC6A8D3B054319FE1AE4F47152B08EAFE11C919B8B2D81DD49F4C7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Discovers running processes
Running process information can be used to identify security tools or plan follow-on actions.