General
- Target DvnX.exe
- Size 1008KB
- Sample261022-2axt5aat9q
- SHA256 2f4d8f8e668dfa68f74167247b15ce87d4e0d3f1eff61d6712aeacce03d87af2
- MD5 ece9bb0f35c796df5ea6d3def49fc51c
- SHA1 a274babb9395f9d79cbfc80dcdd8e3240a8332c4
- SHA512 c0036df6634d878b9cc64e6c6b0d3e3e33983b84d05a3c477bc9ffbbad0ab6fc06b2787e0346d961233298f8912b623cd904667bc24c890cb58679313a6cf17e
- SSDEEP 12288:bhbbLEaQwi2baNgd/zIIonHpcc2WvgtoeoP2kyBoPbxJS7:bhblQwFrVoHpNItejxJE
- TLSH T1C5259D75A7926EF4F043843ED2805E05DB75A8632FEE0CA7423E47258C28AD4B7FB654
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
DvnX.exe
Resource
win10v2004-20260911-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
DvnX.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target DvnX.exe
- Size 1008KB
- SHA256 2f4d8f8e668dfa68f74167247b15ce87d4e0d3f1eff61d6712aeacce03d87af2
- MD5 ece9bb0f35c796df5ea6d3def49fc51c
- SHA1 a274babb9395f9d79cbfc80dcdd8e3240a8332c4
- SHA512 c0036df6634d878b9cc64e6c6b0d3e3e33983b84d05a3c477bc9ffbbad0ab6fc06b2787e0346d961233298f8912b623cd904667bc24c890cb58679313a6cf17e
- SSDEEP 12288:bhbbLEaQwi2baNgd/zIIonHpcc2WvgtoeoP2kyBoPbxJS7:bhblQwFrVoHpNItejxJE
- TLSH T1C5259D75A7926EF4F043843ED2805E05DB75A8632FEE0CA7423E47258C28AD4B7FB654
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of SetThreadContext