General
- Target MintedClientSetup-x86.exe
- Size 2.3MB
- Sample260912-2gs5hsbb55
- SHA256 4f5f3428399964f5551d7be269b6894fca62257a096f3b489390946c2d4d1d01
- MD5 b601f7d713ccea980b6b60849729060f
- SHA1 a43e2bff184c241631c69abf1e1f18758f252141
- SHA512 70c01507eb060176441c18f0482165fc40a7828984a1d89a3d058e69334ebeea42c538c6a10697eaa3c0d76a5bab9bdfe1c3f2832a84666e3ad3a1606c2ddf42
- SSDEEP 49152:jPux3fVa3OlcTXAw6tHCqSTkiYn3RIGAX:wKTXAbCqSTki+8
- TLSH T1B4B55B07E2A350ECC52BC1748767A772BE30B8191134BE7F5AA4DB312F61E509B5EB24
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
MintedClientSetup-x86.exe
Resource
win10v2004-20260911-en
10 signatures
30 seconds
Behavioral task
behavioral2
Sample
MintedClientSetup-x86.exe
Resource
win11ltsc2024-20260911-en
10 signatures
30 seconds
Malware Config
Targets
-
- Target MintedClientSetup-x86.exe
- Size 2.3MB
- SHA256 4f5f3428399964f5551d7be269b6894fca62257a096f3b489390946c2d4d1d01
- MD5 b601f7d713ccea980b6b60849729060f
- SHA1 a43e2bff184c241631c69abf1e1f18758f252141
- SHA512 70c01507eb060176441c18f0482165fc40a7828984a1d89a3d058e69334ebeea42c538c6a10697eaa3c0d76a5bab9bdfe1c3f2832a84666e3ad3a1606c2ddf42
- SSDEEP 49152:jPux3fVa3OlcTXAw6tHCqSTkiYn3RIGAX:wKTXAbCqSTki+8
- TLSH T1B4B55B07E2A350ECC52BC1748767A772BE30B8191134BE7F5AA4DB312F61E509B5EB24
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2PowerShell
1Windows Command Shell
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1