General
-
Target
6a1e61dfc1b7b7b11d744e7a66856e88.exe
-
Size
647KB
-
Sample
210507-naar8vgyna
-
MD5
6a1e61dfc1b7b7b11d744e7a66856e88
-
SHA1
a3aa5ce50030da09cbff97263d0d14b70bf0da41
-
SHA256
d9701948aee1a3fa288bd873b08bbcc1a5b8f2a1bf33ce3873e08d253e59a7de
-
SHA512
7e8e8376ea2a0324d528551504cbab0f410b0f4bfc3bf228f378a10588db2c588dead6150e6a28121cdc0682fd59dc551a44d3109d83a2167309c41f47098f56
Static task
static1
Behavioral task
behavioral1
Sample
6a1e61dfc1b7b7b11d744e7a66856e88.exe
Resource
win7v20210410
Malware Config
Targets
-
-
Target
6a1e61dfc1b7b7b11d744e7a66856e88.exe
-
Size
647KB
-
MD5
6a1e61dfc1b7b7b11d744e7a66856e88
-
SHA1
a3aa5ce50030da09cbff97263d0d14b70bf0da41
-
SHA256
d9701948aee1a3fa288bd873b08bbcc1a5b8f2a1bf33ce3873e08d253e59a7de
-
SHA512
7e8e8376ea2a0324d528551504cbab0f410b0f4bfc3bf228f378a10588db2c588dead6150e6a28121cdc0682fd59dc551a44d3109d83a2167309c41f47098f56
-
Downloads MZ/PE file
-
Deletes itself
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-