General
- Target secondfast.exe
- Size 2.0MB
- Sample260912-p4tncazwav
- SHA256 9da3fb0d1f8c3547f2ccb2ce8f853b640cbbfa5fb9b3cb64a662828c3447dccc
- MD5 03b94adff98fbfbb10ce48f9d291c7f9
- SHA1 258ea38aaa1995556296ca1da21f9856082caae4
- SHA512 e6f25fb099a3bd3f40b87d000c4ede8d4063475453cf66d8ebe2310d16a24fb94a1de1d32f1b9d7229523fe7a802a860318f9b0a344b848d9d0e4b5233ebedc6
- SSDEEP 49152:/p4Q0HE0bLxQbbSCvsFHDKNkMZXCB9jEWK9cQ0D9NMeKYmUyeGKd:/p4QqhRRcPhXigWK9cVDQYmLK
- TLSH T1C4A52301B2E908BFF8B4137959F280A79A3538C15739D6CF5664D70F1E326E66A7230B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Targets
-
- Target secondfast.exe
- Size 2.0MB
- SHA256 9da3fb0d1f8c3547f2ccb2ce8f853b640cbbfa5fb9b3cb64a662828c3447dccc
- MD5 03b94adff98fbfbb10ce48f9d291c7f9
- SHA1 258ea38aaa1995556296ca1da21f9856082caae4
- SHA512 e6f25fb099a3bd3f40b87d000c4ede8d4063475453cf66d8ebe2310d16a24fb94a1de1d32f1b9d7229523fe7a802a860318f9b0a344b848d9d0e4b5233ebedc6
- SSDEEP 49152:/p4Q0HE0bLxQbbSCvsFHDKNkMZXCB9jEWK9cQ0D9NMeKYmUyeGKd:/p4QqhRRcPhXigWK9cVDQYmLK
- TLSH T1C4A52301B2E908BFF8B4137959F280A79A3538C15739D6CF5664D70F1E326E66A7230B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of SetThreadContext