General
-
Target
fe4f2e6ac9d376c90381aa0d76e4ceb2.exe
-
Size
681KB
-
Sample
210507-xfahza6h1x
-
MD5
fe4f2e6ac9d376c90381aa0d76e4ceb2
-
SHA1
d2422dbbd520a1613b5f0fa445f807594e291de5
-
SHA256
1fe1175c82ffe146bcf31adaa4e034e58b23dfc68361367983cb9cdf0e277e66
-
SHA512
0f309d30ec2be883a4ce9df604039e2ec12f2d99ac5b3747b9abfb6febcd73bd497d2ec524f45715bee3e5fed659f67a1febaa9b42e3fc910f5e4e90e7a1cede
Static task
static1
Behavioral task
behavioral1
Sample
fe4f2e6ac9d376c90381aa0d76e4ceb2.exe
Resource
win7v20210410
Malware Config
Targets
-
-
Target
fe4f2e6ac9d376c90381aa0d76e4ceb2.exe
-
Size
681KB
-
MD5
fe4f2e6ac9d376c90381aa0d76e4ceb2
-
SHA1
d2422dbbd520a1613b5f0fa445f807594e291de5
-
SHA256
1fe1175c82ffe146bcf31adaa4e034e58b23dfc68361367983cb9cdf0e277e66
-
SHA512
0f309d30ec2be883a4ce9df604039e2ec12f2d99ac5b3747b9abfb6febcd73bd497d2ec524f45715bee3e5fed659f67a1febaa9b42e3fc910f5e4e90e7a1cede
-
Downloads MZ/PE file
-
Deletes itself
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-