General
- Target secondfast.exe
- Size 627KB
- Sample260913-wftrrsttex
- SHA256 55cd3d36fdcc58016a64398357b2c9724a060da9f0d09266e537a61ec9552e4f
- MD5 68d9d1fafb5beeeda1e47ba880142c6a
- SHA1 02931ea9da3100f3383a78c4276d76fc3e034907
- SHA512 6d8c95c947cabd61833cb1dc96c9a7af755008e0d24f1c8f253ac6645a8938cc175c64d106fc40a5f24d9bbd083d2c6fb87ae6b286c74803055483c374dff048
- SSDEEP 12288:WPHg8MRvqNI2MyfLeA1Vt6EvTiLk2p83LEIbXmesXP8dNxR8FF4:WP1siNIFy5Vt6EvT12yb5bXTUFF4
- TLSH T168D4F17271D127F8E87FE4378D990605CBFA79710B2041FB42A42A560E37AED6E39B11
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
secondfast.exe
Resource
win10v2004-20260911-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
secondfast.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target secondfast.exe
- Size 627KB
- SHA256 55cd3d36fdcc58016a64398357b2c9724a060da9f0d09266e537a61ec9552e4f
- MD5 68d9d1fafb5beeeda1e47ba880142c6a
- SHA1 02931ea9da3100f3383a78c4276d76fc3e034907
- SHA512 6d8c95c947cabd61833cb1dc96c9a7af755008e0d24f1c8f253ac6645a8938cc175c64d106fc40a5f24d9bbd083d2c6fb87ae6b286c74803055483c374dff048
- SSDEEP 12288:WPHg8MRvqNI2MyfLeA1Vt6EvTiLk2p83LEIbXmesXP8dNxR8FF4:WP1siNIFy5Vt6EvT12yb5bXTUFF4
- TLSH T168D4F17271D127F8E87FE4378D990605CBFA79710B2041FB42A42A560E37AED6E39B11
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of SetThreadContext