General
- Target 93811dad2c7a7065f0eabb8908fc490b3c405fa8f71ee5940ee6baedec35ae0b.exe
- Size 2.8MB
- Sample261110-epp2hacg59
- SHA256 93811dad2c7a7065f0eabb8908fc490b3c405fa8f71ee5940ee6baedec35ae0b
- MD5 9453fc8efd72f0f547b92c408865b3b6
- SHA1 8dbbfd3c65f9245a2e1a032c4ff1de7302912396
- SHA512 8c42e49829d701be2888c6f1b2921aa92c7e5e2a930a69fc0c249a94820ad3d6dc93ecdea65732f616f7d2e82b0b58796125bc206eb1deb85e3a2ce131c72802
- SSDEEP 49152:ncwMOYhPa2+3iJGV3iQqPV7bJ9FrbkUUavwlRoxQifxhDkPwcFejcwl7oLux:cwMdR+GS3Bqd3xEravwU6ifxh3I7wl7l
- TLSH T146D523D9FDB20474E873C7668293A4BEB12E77809B710D4BB6CCAB205E522583D35379
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
93811dad2c7a7065f0eabb8908fc490b3c405fa8f71ee5940ee6baedec35ae0b.exe
Resource
win10v2004-20260911-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
93811dad2c7a7065f0eabb8908fc490b3c405fa8f71ee5940ee6baedec35ae0b.exe
Resource
win11ltsc2024-20260911-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 93811dad2c7a7065f0eabb8908fc490b3c405fa8f71ee5940ee6baedec35ae0b.exe
- Size 2.8MB
- SHA256 93811dad2c7a7065f0eabb8908fc490b3c405fa8f71ee5940ee6baedec35ae0b
- MD5 9453fc8efd72f0f547b92c408865b3b6
- SHA1 8dbbfd3c65f9245a2e1a032c4ff1de7302912396
- SHA512 8c42e49829d701be2888c6f1b2921aa92c7e5e2a930a69fc0c249a94820ad3d6dc93ecdea65732f616f7d2e82b0b58796125bc206eb1deb85e3a2ce131c72802
- SSDEEP 49152:ncwMOYhPa2+3iJGV3iQqPV7bJ9FrbkUUavwlRoxQifxhDkPwcFejcwl7oLux:cwMdR+GS3Bqd3xEravwU6ifxh3I7wl7l
- TLSH T146D523D9FDB20474E873C7668293A4BEB12E77809B710D4BB6CCAB205E522583D35379
- MD5 SHA1 SHA512 SSDEEP TLSH
Deletes itself
Executes dropped EXE
Accesses cryptocurrency files/wallets, possible credential harvesting
MITRE ATT&CK Enterprise v16
Defense Evasion
Indicator Removal
1File Deletion
1Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1