e03f2473cbd3b67cbe376ecca3f89fce0e99de7486b0302e14be92826f5710db

Analysis

max time kernel
150s
max time network
128s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/09/2026, 18:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
FeatherWalletSetup-2.8.1.exe
Size 21.5MB
Sample260930-wy9wpstvcw
SHA256 e03f2473cbd3b67cbe376ecca3f89fce0e99de7486b0302e14be92826f5710db
MD5 26e4ac0662c765e5ebd2f105aacb39cb
SHA1 d513fa7229519695eae6d91ea8e16e746ae21f55
SHA512 9bbfe8f2e963600acdcbad5043999a655fb630cb0f0f28836213727a5087da3ab1e613e97cc3eba3728e2e30686ee00e9c816421a5683ca5eef94dcb673c28ae
SSDEEP 393216:hSpUfECCgu37xFEwuA1iBOAVyNQsmAFROc/DdRJpT79G+jK8m70QxpCfS5Vq4VXd:gpUfECPuLxKwB1iBOiyNnm2RL/RRL74L
TLSH
T1E537330387D04A54DF4F8D3046B6ECA76376A8601B1C601B7D0FED5329A6A9FF07E686
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
3484	FeatherWalletSetup-2.8.1.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\FeatherWalletSetup-2.8.1.exe
"C:\Users\Admin\AppData\Local\Temp\FeatherWalletSetup-2.8.1.exe"
1⤵
- Loads dropped DLL
PID:3484

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

StartMenu.dll

Path C:\Users\Admin\AppData\Local\Temp\nsq6B64.tmp\StartMenu.dll
Size 11KB
SHA256 8259f95364f5af2c9994b8e4aef670dba4e5e1502b56de64b062ea5733130dc8
MD5 1d05fa34dbac8b899367bb8579358436
SHA1 26b1841859b14ffb9e520a4eca42a77c8da72302
SHA512 e7c39a2f0dd8fe7f476dc80a39613c22794e67c1aa05ef0e442b0c90f23cd0f4f62c3a4608fc52b694a4424f6e646774235c3ad57165ce7b4e40e3b1629c9281
SSDEEP 192:TLB7OopThb4h9qRqsHUzKX9zvJU6FTBo5BoYbK:TLB77pCh97s0zKZvKS
TLSH
T12532C61B7ED140DADC6EE238E5FA5B3129B2B44015397B0F4618928FBF60EA19939744
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/3484-5-0x0000000140000000-0x0000000140075000-memory.dmp

Download

memory/3484-6-0x00007FF938790000-0x00007FF93879D000-memory.dmp