General
-
Target
c309d31a1e63d91902f57babfc2ef7a8.exe
-
Size
562KB
-
Sample
210421-2fm2d1kp9x
-
MD5
c309d31a1e63d91902f57babfc2ef7a8
-
SHA1
b44dd52e92b0d9eb6e7a4b242819f0687e137d03
-
SHA256
942f4661c17b49061467e305b9d5fe5be2a061f1def29bec379c7588149dc6e1
-
SHA512
f7eacc9181e6704f9196387e83710fb5b01b1194ce339e2522a442cb55e6d3b7712bcc05f97ec608cd1b378ddaf56adac11a716429d136c32ba6d79e2f83c682
Static task
static1
Behavioral task
behavioral1
Sample
c309d31a1e63d91902f57babfc2ef7a8.exe
Resource
win7v20210410
Malware Config
Targets
-
-
Target
c309d31a1e63d91902f57babfc2ef7a8.exe
-
Size
562KB
-
MD5
c309d31a1e63d91902f57babfc2ef7a8
-
SHA1
b44dd52e92b0d9eb6e7a4b242819f0687e137d03
-
SHA256
942f4661c17b49061467e305b9d5fe5be2a061f1def29bec379c7588149dc6e1
-
SHA512
f7eacc9181e6704f9196387e83710fb5b01b1194ce339e2522a442cb55e6d3b7712bcc05f97ec608cd1b378ddaf56adac11a716429d136c32ba6d79e2f83c682
-
Downloads MZ/PE file
-
Deletes itself
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-