General
- Target Setup.exe
- Size 1.1MB
- Sample261022-xdbc3sttdx
- SHA256 457a83566516ed5437f7c737be3ee4f85b24a84dcf25d2dd21912e3b0911db9f
- MD5 543ab73e42f14b2b28ffef193a27f4d8
- SHA1 032fa7db637706deab949312f27f532b39e15953
- SHA512 171d13766e9e90006a6352704862052cb046e19ed7a7007b64e480c1d14d754ee3c3616780aca3e24348925f6764e58336f10a6e2940fd1c853de11a50a0cdf1
- SSDEEP 12288:4dHBZGIVqVmNNv4/TnTw7AuoVgwsqp1g6EUBLaidyC+7r/WvATabtKBYU1Kg7jk4:4YIVp4v0oVbsk9yJO0abcxK6jkXpxFS
- TLSH T13835AC54A3550CB8FFE5857089967F24945138D21BE01CABF6BC12CECAE7B81BBF2614
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Setup.exe
Resource
win10v2004-20260911-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target Setup.exe
- Size 1.1MB
- SHA256 457a83566516ed5437f7c737be3ee4f85b24a84dcf25d2dd21912e3b0911db9f
- MD5 543ab73e42f14b2b28ffef193a27f4d8
- SHA1 032fa7db637706deab949312f27f532b39e15953
- SHA512 171d13766e9e90006a6352704862052cb046e19ed7a7007b64e480c1d14d754ee3c3616780aca3e24348925f6764e58336f10a6e2940fd1c853de11a50a0cdf1
- SSDEEP 12288:4dHBZGIVqVmNNv4/TnTw7AuoVgwsqp1g6EUBLaidyC+7r/WvATabtKBYU1Kg7jk4:4YIVp4v0oVbsk9yJO0abcxK6jkXpxFS
- TLSH T13835AC54A3550CB8FFE5857089967F24945138D21BE01CABF6BC12CECAE7B81BBF2614
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of SetThreadContext