General
- Target ccb3d3608738021405f14fd68b4d8a185aa66b5df5c60d714e5156815486882d.bin
- Size 603KB
- Sample261113-bajpdses31
- SHA256 ccb3d3608738021405f14fd68b4d8a185aa66b5df5c60d714e5156815486882d
- MD5 ca6655f8b99e95d4be96f714063ffaf8
- SHA1 47bc9becf57cc7c820fc242f279128efce3e21e9
- SHA512 7f9b551c8f354ab45259874a7b048431b2e59ea5865335342864987fafcf9fc57fcdc5e7e26b300508fc41b63fbb40462107813e8dad058e6dbcfcd55a60c3a0
- SSDEEP 12288:RHFVqwDkZNV7frZQ2ZPrwq6ru5VNR2dXW3YorX3hZotCYjv:xFKtf9Q2BeuCXW1h+tvv
- TLSH T1ADD40205FA8585E9C036C1798A630652FAB27C590760E9FF43649B7E1E277E0833EF64
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ccb3d3608738021405f14fd68b4d8a185aa66b5df5c60d714e5156815486882d.dll
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target ccb3d3608738021405f14fd68b4d8a185aa66b5df5c60d714e5156815486882d.bin
- Size 603KB
- SHA256 ccb3d3608738021405f14fd68b4d8a185aa66b5df5c60d714e5156815486882d
- MD5 ca6655f8b99e95d4be96f714063ffaf8
- SHA1 47bc9becf57cc7c820fc242f279128efce3e21e9
- SHA512 7f9b551c8f354ab45259874a7b048431b2e59ea5865335342864987fafcf9fc57fcdc5e7e26b300508fc41b63fbb40462107813e8dad058e6dbcfcd55a60c3a0
- SSDEEP 12288:RHFVqwDkZNV7frZQ2ZPrwq6ru5VNR2dXW3YorX3hZotCYjv:xFKtf9Q2BeuCXW1h+tvv
- TLSH T1ADD40205FA8585E9C036C1798A630652FAB27C590760E9FF43649B7E1E277E0833EF64
- MD5 SHA1 SHA512 SSDEEP TLSH
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
Downloads a file with CertUtil
CertUtil's URL cache options fetch arbitrary files from a web server, which can be used to retrieve further payloads.
Accesses cryptocurrency files/wallets, possible credential harvesting
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
2Credentials In Files
2