General
-
Target
1DAC307792E45851205962E1C6FDE7AF.exe
-
Size
582KB
-
Sample
210420-n458bc4x1e
-
MD5
1dac307792e45851205962e1c6fde7af
-
SHA1
c49be84a3c3d491ab569b35659765ab70689110c
-
SHA256
498a439463d296db338fe3672714b56a8dbddd1864ff302d005fa451bf9a9c22
-
SHA512
a4dc5c03d53a6f6d12ffda182312fea7fdbcd0c2d6a5de33002c97597934e953ae81f76f61ee4e56cae2fc985a0542d14d1925e126cebc3c8e001d529633e1e2
Static task
static1
Behavioral task
behavioral1
Sample
1DAC307792E45851205962E1C6FDE7AF.exe
Resource
win7v20210408
Malware Config
Targets
-
-
Target
1DAC307792E45851205962E1C6FDE7AF.exe
-
Size
582KB
-
MD5
1dac307792e45851205962e1c6fde7af
-
SHA1
c49be84a3c3d491ab569b35659765ab70689110c
-
SHA256
498a439463d296db338fe3672714b56a8dbddd1864ff302d005fa451bf9a9c22
-
SHA512
a4dc5c03d53a6f6d12ffda182312fea7fdbcd0c2d6a5de33002c97597934e953ae81f76f61ee4e56cae2fc985a0542d14d1925e126cebc3c8e001d529633e1e2
-
Downloads MZ/PE file
-
Deletes itself
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-