General
-
Target
5e14291d1ddc502823a02e1bdb0cee56.exe
-
Size
306KB
-
Sample
240428-sa1rcaac73
-
MD5
5e14291d1ddc502823a02e1bdb0cee56
-
SHA1
1ce2cc9c34fa0386b4d2d7ca36d4504fda3d1130
-
SHA256
f98a232e9e666e4af8894757f171505040762677b4fcfa4e00269ea548ca13f7
-
SHA512
a96959377102289f93579c73939d0da98b6e2fe79aaf53c93727cb45ca28ee64451ef33a676ef06e095ccc89fe447edc92f539a121db4112f7533773758df985
-
SSDEEP
3072:23Cbs6xpadpZ8MtN+pbLmXcXi3uyPXEpkUEt92NbphFfOSNhcBquEiHE/I7IuU:VEdLd6q3uysKGGremE/+U
Static task
static1
Behavioral task
behavioral1
Sample
5e14291d1ddc502823a02e1bdb0cee56.exe
Resource
win7-20240221-en
Malware Config
Extracted
stealc
http://185.172.128.150
-
url_path
/c698e1bc8a2f5e6d.php
Targets
-
-
Target
5e14291d1ddc502823a02e1bdb0cee56.exe
-
Size
306KB
-
MD5
5e14291d1ddc502823a02e1bdb0cee56
-
SHA1
1ce2cc9c34fa0386b4d2d7ca36d4504fda3d1130
-
SHA256
f98a232e9e666e4af8894757f171505040762677b4fcfa4e00269ea548ca13f7
-
SHA512
a96959377102289f93579c73939d0da98b6e2fe79aaf53c93727cb45ca28ee64451ef33a676ef06e095ccc89fe447edc92f539a121db4112f7533773758df985
-
SSDEEP
3072:23Cbs6xpadpZ8MtN+pbLmXcXi3uyPXEpkUEt92NbphFfOSNhcBquEiHE/I7IuU:VEdLd6q3uysKGGremE/+U
-
Downloads MZ/PE file
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-