General
- Target c406cc4d733dffb52a0136b69a009ebc2c9842f6b066081beff780ce982e2cd6
- Size 1.1MB
- Sample261102-grflys1sd1
- SHA256 c406cc4d733dffb52a0136b69a009ebc2c9842f6b066081beff780ce982e2cd6
- MD5 5656ef1fe264aadc9eb57f1730d89914
- SHA1 9c3d24c4366b27bfd15a0a8d0c99d0e981c967c6
- SHA512 1445094ef30d664a526323f5484dd3e2ab67f09465fc41ac2f2d238d332f8f04f4e7eb2d2dc00835413cd844706f0374e45d538591bcd91370ecd72865c15c12
- SSDEEP 24576:B1OWrB3ettCIZNvn46PdEAeNUr9nBeJNDB:DR3OnCzIc
- TLSH T1B935DE1DAF8F4DFCF066867001115722A975387ECBE066AB524C37DA2DEA3D14BF9208
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
c406cc4d733dffb52a0136b69a009ebc2c9842f6b066081beff780ce982e2cd6.exe
Resource
win10v2004-20260911-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
c406cc4d733dffb52a0136b69a009ebc2c9842f6b066081beff780ce982e2cd6.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target c406cc4d733dffb52a0136b69a009ebc2c9842f6b066081beff780ce982e2cd6
- Size 1.1MB
- SHA256 c406cc4d733dffb52a0136b69a009ebc2c9842f6b066081beff780ce982e2cd6
- MD5 5656ef1fe264aadc9eb57f1730d89914
- SHA1 9c3d24c4366b27bfd15a0a8d0c99d0e981c967c6
- SHA512 1445094ef30d664a526323f5484dd3e2ab67f09465fc41ac2f2d238d332f8f04f4e7eb2d2dc00835413cd844706f0374e45d538591bcd91370ecd72865c15c12
- SSDEEP 24576:B1OWrB3ettCIZNvn46PdEAeNUr9nBeJNDB:DR3OnCzIc
- TLSH T1B935DE1DAF8F4DFCF066867001115722A975387ECBE066AB524C37DA2DEA3D14BF9208
- MD5 SHA1 SHA512 SSDEEP TLSH
Accesses cryptocurrency files/wallets, possible credential harvesting
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
Suspicious use of SetThreadContext