General
- Target cx-programmer 9.1 free download full.7z
- Size 14.4MB
- Sample261007-e5383abx7y
- SHA256 a0df6a94057dfad6ec1b8985845d9517ff7c5ac7257fa7eedc0b8a058f7154e4
- MD5 b15d80e78194eda4ab583ee9964db193
- SHA1 fcfd6ce62ab608021d1b0265740e185bdedcfeb2
- SHA512 1296268356e32dcf1111a73a7ec86d9be41d9f5501c77d32557d164ad8a879a0e2851c9f6d5be94bcd5f141d05fbaf865d0a0598a38407dc0f7bf64e117a37fc
- SSDEEP 393216:GpzfBjXq+VVTrf7CgmXOG9hHvdXPRVqrA47mqmD0e1wisP:Wbz7Czb9hHvZPR8A47o08u
- TLSH T1CDE6330EE86DE25808BF9FE6E0632D47AF528372E3393291359111271DBFBD9B145217
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
cx-programmer 9.1 free download full.exe
Resource
win10v2004-20260911-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
cx-programmer 9.1 free download full.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target cx-programmer 9.1 free download full.exe
- Size 912.0MB
- SHA256 bed62f416dc90be5e0f81688f3519d198b6f6b914a439552573116f5af44ff5b
- MD5 7f956d54e8f2b690a1f4be8beb9ec185
- SHA1 a320c3cead4463a9902debb9a081572c5511920d
- SHA512 033836ddfc0da8c35a3c3815eabd89697241f93df2ce3f65eaa86c2bdd852063f02007f188cbe77917853ff1673da2c9ba1b84267362cf18e5a721b004c6145a
- SSDEEP 393216:VD7WotCh4G5yMOLIXHod/P2JjLO+IeEv9jYLRWax4akUdaHoBNONnn:VPNxIjOLCodn2Jjy+Ibar4akUAYNOx
- TLSH T102A99D03F7D84075E2FB2630252AA636767EBD201FE081CB679566AE2D717C19E3035B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Suspicious use of SetThreadContext