General
- Target 1a672cebbc966188cd5ae180a91fa4a3.exe
- Size 2.9MB
- Sample261113-pcrdxabt5m
- SHA256 5527238dc1de3f3141b41816cfd1073ec88f6b9d0f10b6ebfbe70b4eb79cab97
- MD5 1a672cebbc966188cd5ae180a91fa4a3
- SHA1 8a37a7822bbdcc7b359fe941a14c3344be22b1c9
- SHA512 e0a94dcdb75e0748ff02544f1daccf8e75cdebe777c302355c9b404bc639dbf99cd78edfedd8b5e9cf403467ed175da638b9830296ab297178562eeae17b0d07
- SSDEEP 49152:rQHfO3Bwqe8AygDqzVVSC2/h2r5qJ66QHDt/hpkK8jTt/LmjsO/uK439kwV/Q:r3B5enypULh2r5T6GZAKCT5ssO239kO
- TLSH T1B8D523A9FCE62670E833C7B74357642EB22937514BB48C5736C82B206D62608BD77379
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
1a672cebbc966188cd5ae180a91fa4a3.exe
Resource
win10v2004-20260911-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
1a672cebbc966188cd5ae180a91fa4a3.exe
Resource
win11ltsc2024-20260911-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 1a672cebbc966188cd5ae180a91fa4a3.exe
- Size 2.9MB
- SHA256 5527238dc1de3f3141b41816cfd1073ec88f6b9d0f10b6ebfbe70b4eb79cab97
- MD5 1a672cebbc966188cd5ae180a91fa4a3
- SHA1 8a37a7822bbdcc7b359fe941a14c3344be22b1c9
- SHA512 e0a94dcdb75e0748ff02544f1daccf8e75cdebe777c302355c9b404bc639dbf99cd78edfedd8b5e9cf403467ed175da638b9830296ab297178562eeae17b0d07
- SSDEEP 49152:rQHfO3Bwqe8AygDqzVVSC2/h2r5qJ66QHDt/hpkK8jTt/LmjsO/uK439kwV/Q:r3B5enypULh2r5T6GZAKCT5ssO239kO
- TLSH T1B8D523A9FCE62670E833C7B74357642EB22937514BB48C5736C82B206D62608BD77379
- MD5 SHA1 SHA512 SSDEEP TLSH
Deletes itself
Executes dropped EXE
Accesses cryptocurrency files/wallets, possible credential harvesting
MITRE ATT&CK Enterprise v16
Defense Evasion
Indicator Removal
1File Deletion
1Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1