General
- Target cx-programmer 9.1 free download full.7z
- Size 16.3MB
- Sample260912-shgnfayhrh
- SHA256 543f976b349dc9539c1a3212f7033d63b4a4155027f5b81860b82b8da6f60353
- MD5 20c89204c80bf890c0d5c0e18f04a4eb
- SHA1 190dde0b2abde16cfd3510f019a8c8a825b88051
- SHA512 d618ea91c0391825a2942d28fe8742cc7c64d15af0988e56074371b7b03c0d4514c0a272d752daf64dc9a0e452b76b8840307a7af1f4ce1d1727d8495f89071d
- SSDEEP 393216:Yew0cx9UjGQgEIuxDUJ3D7qRV2uUYxoSg7nP17eN0vyQV0KtjZ:Yew0cx9gxgfux8zG6uUYsJevUFtjZ
- TLSH T1580733A90715D8E19DC2CF0D3E6ED8540B770235591E0AF007F422A5A6EF6A87DEC9B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
cx-programmer 9.1 free download full.exe
Resource
win10v2004-20260911-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
cx-programmer 9.1 free download full.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target cx-programmer 9.1 free download full.exe
- Size 807.6MB
- SHA256 51c4946f06bfce8099d2193d04c17aedabb874f0f6901e7193143e0ae8cb0115
- MD5 f68d49aa4eb2e83c9083ed70f0eecb4e
- SHA1 cd0666a767cdadb0ba9a868c698a16b5cf90b13f
- SHA512 95225ac2a36423bbbf1389637d36020c31746d4521b0b791a73750d36a49b0ff1eaeeaad02797f4674480b351614b21d3475edf961cbf4abdfc9c9f908835bee
- SSDEEP 393216:AI7ibuXR6Ik8L0xc9tM7jw2J/Je33AluTumlROyRwww5RhRuIdQFpa9E:nhg8ATvBA3Aluaml/a5j9
- TLSH T11199BF02B7E84066F5B7563499B78A12EA3ABD611B31C3DF0294A26D1E737C09F34727
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of SetThreadContext