General
- Target a7781b90999d7070b5777383bc71397319710cc2b6386fd32a8c11e1f8cf778b.exe
- Size 1.2MB
- Sample261027-a8gr1sav5r
- SHA256 a7781b90999d7070b5777383bc71397319710cc2b6386fd32a8c11e1f8cf778b
- MD5 1b361b4f799442112259d073054edc7a
- SHA1 1c81f8033e92c64189a40d7848eef145cc40975e
- SHA512 62d446194f4c58b48c7052b5a465c9440c8a83601e44c601bb177ffc3278cdbed865677073ca29bce33fb20fc43d104599d6c02399435b91db02a8a20f25bde5
- SSDEEP 24576:7BbGluhJdjKyFAxVbDS436Lu2+V+d3IhaY4Uno:7BbGEXhaD36LZrj
- TLSH T1CB458B51A7F30FBAF82B8935817155E495E128D21BD37BBA134C22F9083D790BAF5B12
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
a7781b90999d7070b5777383bc71397319710cc2b6386fd32a8c11e1f8cf778b.exe
Resource
win10v2004-20260911-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
a7781b90999d7070b5777383bc71397319710cc2b6386fd32a8c11e1f8cf778b.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target a7781b90999d7070b5777383bc71397319710cc2b6386fd32a8c11e1f8cf778b.exe
- Size 1.2MB
- SHA256 a7781b90999d7070b5777383bc71397319710cc2b6386fd32a8c11e1f8cf778b
- MD5 1b361b4f799442112259d073054edc7a
- SHA1 1c81f8033e92c64189a40d7848eef145cc40975e
- SHA512 62d446194f4c58b48c7052b5a465c9440c8a83601e44c601bb177ffc3278cdbed865677073ca29bce33fb20fc43d104599d6c02399435b91db02a8a20f25bde5
- SSDEEP 24576:7BbGluhJdjKyFAxVbDS436Lu2+V+d3IhaY4Uno:7BbGEXhaD36LZrj
- TLSH T1CB458B51A7F30FBAF82B8935817155E495E128D21BD37BBA134C22F9083D790BAF5B12
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of SetThreadContext