General

  • Target
    c406cc4d733dffb52a0136b69a009ebc2c9842f6b066081beff780ce982e2cd6
  • Size 1.1MB
  • Sample261102-grflys1sd1
  • SHA256 c406cc4d733dffb52a0136b69a009ebc2c9842f6b066081beff780ce982e2cd6
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10

Malware Config

Targets

    • Target
      c406cc4d733dffb52a0136b69a009ebc2c9842f6b066081beff780ce982e2cd6
    • Size 1.1MB
    • SHA256 c406cc4d733dffb52a0136b69a009ebc2c9842f6b066081beff780ce982e2cd6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks