General
- Target GrplW9.tmp
- Size 1.0MB
- Sample261102-gy557aec39
- SHA256 1dc76dd2ffcf1ba0a495c94be3c133d5b65b806d6cac5d8e717fe02d6e6430a2
- MD5 947670e89199bdd9fc682a6374aa0909
- SHA1 9e74156ae199aa39e6e4a8b181207f38740dcf49
- SHA512 a673966262493745edd1d38eae688b2cebc2594ebcf80001dd1b417183021ebf26476fcc7444c84368762874ff95bbb81d8074972e5e323b5fd2dd76d5adf727
- SSDEEP 12288:GOvzNMb+unq/ZcKQ/KpPZrdpWv71t7A763DDSTxdplobvQ/4TlRRRkpi5pT4wqZf:vMsZu/arWz4763ST7DoTQgzpki/CP
- TLSH T10D356DCA5C66CCE1E41500F4D0298C79816279568DEA4ECACE9C1E7592F074E3EDFA3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
GrplW9.exe
Resource
win10v2004-20260911-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
GrplW9.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target GrplW9.tmp
- Size 1.0MB
- SHA256 1dc76dd2ffcf1ba0a495c94be3c133d5b65b806d6cac5d8e717fe02d6e6430a2
- MD5 947670e89199bdd9fc682a6374aa0909
- SHA1 9e74156ae199aa39e6e4a8b181207f38740dcf49
- SHA512 a673966262493745edd1d38eae688b2cebc2594ebcf80001dd1b417183021ebf26476fcc7444c84368762874ff95bbb81d8074972e5e323b5fd2dd76d5adf727
- SSDEEP 12288:GOvzNMb+unq/ZcKQ/KpPZrdpWv71t7A763DDSTxdplobvQ/4TlRRRkpi5pT4wqZf:vMsZu/arWz4763ST7DoTQgzpki/CP
- TLSH T10D356DCA5C66CCE1E41500F4D0298C79816279568DEA4ECACE9C1E7592F074E3EDFA3E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of SetThreadContext