General
- Target ec7977cc97003f2a34b13edebfc7db888fc22c4dde96b7bccca1ddbd2e191ac1
- Size 3.0MB
- Sample261110-e85lasyzfz
- SHA256 ec7977cc97003f2a34b13edebfc7db888fc22c4dde96b7bccca1ddbd2e191ac1
- MD5 7bcfefeb53a07032cd85fd8cd6ab0601
- SHA1 a8a7056052c6dc55e38d837623bc1f7ca439fae8
- SHA512 689091938a5bf5e5e91087133ce926e4baaee1ca210f4d2a6c90fd30e5f0701f40b2165cdb533bee1de5e26d89fffa75e1dbd5df1a5892b60ee1b3aaf06cd73d
- SSDEEP 98304:K0dx4+gamVGkg49/cPELfdyVkKVj+X6NodO4v3C:K0QX/ctVfZ+XSkJv3
- TLSH T1CAE5330CA4A79DFECA2A06B846BBAC77804EFE076CD4CC7A4D205A5CFF45D155CA9C90
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ec7977cc97003f2a34b13edebfc7db888fc22c4dde96b7bccca1ddbd2e191ac1.exe
Resource
win10v2004-20260911-es
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
ec7977cc97003f2a34b13edebfc7db888fc22c4dde96b7bccca1ddbd2e191ac1.exe
Resource
win11ltsc2024-20260911-es
15 signatures
150 seconds
Malware Config
Targets
-
- Target ec7977cc97003f2a34b13edebfc7db888fc22c4dde96b7bccca1ddbd2e191ac1
- Size 3.0MB
- SHA256 ec7977cc97003f2a34b13edebfc7db888fc22c4dde96b7bccca1ddbd2e191ac1
- MD5 7bcfefeb53a07032cd85fd8cd6ab0601
- SHA1 a8a7056052c6dc55e38d837623bc1f7ca439fae8
- SHA512 689091938a5bf5e5e91087133ce926e4baaee1ca210f4d2a6c90fd30e5f0701f40b2165cdb533bee1de5e26d89fffa75e1dbd5df1a5892b60ee1b3aaf06cd73d
- SSDEEP 98304:K0dx4+gamVGkg49/cPELfdyVkKVj+X6NodO4v3C:K0QX/ctVfZ+XSkJv3
- TLSH T1CAE5330CA4A79DFECA2A06B846BBAC77804EFE076CD4CC7A4D205A5CFF45D155CA9C90
- MD5 SHA1 SHA512 SSDEEP TLSH
Detects NWHStealer
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
Accesses cryptocurrency files/wallets, possible credential harvesting
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
3Credentials In Files
3