General
- Target stage2.bin
- Size 977KB
- Sample260930-x755jsx1ds
- SHA256 1890573e374d43a23715a97efdc48152830184d9075161d092b4c382d57c579c
- MD5 36a59bc498981613f7a087b540038dc6
- SHA1 5812bf099252452c9f56c18eb3f6815911329f4d
- SHA512 6b07920c8ddf5eb5d8babfd8e67e50598011a39e67abe4a4c82cb8123405b0043e6fe056076652ee286fb2a9757317a7e7f2669c4270f10ebd588d6372b38ab3
- SSDEEP 24576:GFpuOGN8dd1V3W+bUbxX7ZEQjEtGndB7RlXR:Ep0+dLTk6QbB75
- TLSH T13C251A045A4311B1D7ECCABDDB20746ED320E82A95FC07DBA17D89DEDE6E09444EE287
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
stage2.exe
Resource
win10v2004-20260911-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
stage2.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target stage2.bin
- Size 977KB
- SHA256 1890573e374d43a23715a97efdc48152830184d9075161d092b4c382d57c579c
- MD5 36a59bc498981613f7a087b540038dc6
- SHA1 5812bf099252452c9f56c18eb3f6815911329f4d
- SHA512 6b07920c8ddf5eb5d8babfd8e67e50598011a39e67abe4a4c82cb8123405b0043e6fe056076652ee286fb2a9757317a7e7f2669c4270f10ebd588d6372b38ab3
- SSDEEP 24576:GFpuOGN8dd1V3W+bUbxX7ZEQjEtGndB7RlXR:Ep0+dLTk6QbB75
- TLSH T13C251A045A4311B1D7ECCABDDB20746ED320E82A95FC07DBA17D89DEDE6E09444EE287
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of SetThreadContext