General
- Target SecondRunner.exe
- Size 618KB
- Sample260924-pc72nade88
- SHA256 b641e7d6d757a5b898c97a3b0482cf2257646e67a6aeaf5ffcebce1a7d5f1565
- MD5 8854ad59fc4de27ae5be72a56a70cf4d
- SHA1 63682124a6d5afa38789bb8fd6f2a71e35be7ccb
- SHA512 1b8a19439a1b736a23a0e1937c7b0b6e9b1903422f0975590697255035dbad9ff8b013e480f87f4ed5ed5d4219c12a9a2ddd470069a7933aad8b7d9353f5237c
- SSDEEP 12288:rxlJUIGcwLSeeBKF0RjGaMJnl/bDU0/BsGRoXNDzWj8:r9UE0d1nVbBvoXN3
- TLSH T18ED4E0A1B6E420E5F926C073C18757549DEAFC621F505BFBA2240A192F711D8CF3AF29
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
SecondRunner.exe
Resource
win10v2004-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target SecondRunner.exe
- Size 618KB
- SHA256 b641e7d6d757a5b898c97a3b0482cf2257646e67a6aeaf5ffcebce1a7d5f1565
- MD5 8854ad59fc4de27ae5be72a56a70cf4d
- SHA1 63682124a6d5afa38789bb8fd6f2a71e35be7ccb
- SHA512 1b8a19439a1b736a23a0e1937c7b0b6e9b1903422f0975590697255035dbad9ff8b013e480f87f4ed5ed5d4219c12a9a2ddd470069a7933aad8b7d9353f5237c
- SSDEEP 12288:rxlJUIGcwLSeeBKF0RjGaMJnl/bDU0/BsGRoXNDzWj8:r9UE0d1nVbBvoXN3
- TLSH T18ED4E0A1B6E420E5F926C073C18757549DEAFC621F505BFBA2240A192F711D8CF3AF29
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of SetThreadContext