General
-
Target
4398bff3b9b04408be8cfd046fd1e273.exe
-
Size
562KB
-
Sample
210421-2sn839vs7n
-
MD5
4398bff3b9b04408be8cfd046fd1e273
-
SHA1
7f681591a8d99b24ef58a766fbc7938373213df8
-
SHA256
3aecc29c243a0781768603d0a25b331963aaa1ef6a56f0677eb760a34bf2ea2c
-
SHA512
8a07e640400acbd83305d741e58aab4cff9b1c4c23046beb6198c5022e929e8d6e009578a9c286c631e6c7fe33f265a6c6d0ff95b49e0dc244ac6d4fa6b7eb3a
Static task
static1
Behavioral task
behavioral1
Sample
4398bff3b9b04408be8cfd046fd1e273.exe
Resource
win7v20210410
Malware Config
Targets
-
-
Target
4398bff3b9b04408be8cfd046fd1e273.exe
-
Size
562KB
-
MD5
4398bff3b9b04408be8cfd046fd1e273
-
SHA1
7f681591a8d99b24ef58a766fbc7938373213df8
-
SHA256
3aecc29c243a0781768603d0a25b331963aaa1ef6a56f0677eb760a34bf2ea2c
-
SHA512
8a07e640400acbd83305d741e58aab4cff9b1c4c23046beb6198c5022e929e8d6e009578a9c286c631e6c7fe33f265a6c6d0ff95b49e0dc244ac6d4fa6b7eb3a
-
Downloads MZ/PE file
-
Deletes itself
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-