General
-
Target
main_setup.exe
-
Size
873KB
-
Sample
220224-djr38sdbdk
-
MD5
d373f2439a302ef03640bb043906e29c
-
SHA1
2c2a47b939f08942b40c98d6af02516adcea1053
-
SHA256
e0706917bcf1faa84a513753f7fe0af1c8738b0495af938d55134ba5d2ac2f74
-
SHA512
9de3d0f0e9467d13fbfac31095d87a30930b69ef9bc45a7400968fe0be1946c86ab59047b0155440fd94607f8783dbb70ebb8ba5c2f5e858b9fca7d7978898a3
Static task
static1
Malware Config
Targets
-
-
Target
main_setup.exe
-
Size
873KB
-
MD5
d373f2439a302ef03640bb043906e29c
-
SHA1
2c2a47b939f08942b40c98d6af02516adcea1053
-
SHA256
e0706917bcf1faa84a513753f7fe0af1c8738b0495af938d55134ba5d2ac2f74
-
SHA512
9de3d0f0e9467d13fbfac31095d87a30930b69ef9bc45a7400968fe0be1946c86ab59047b0155440fd94607f8783dbb70ebb8ba5c2f5e858b9fca7d7978898a3
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-