General
- Target 8216e4c1977597afe01bb3c0a47631bd7608963a38ca6c396790fbf37d0fcffb_pidor.xyz_dedob2.exe
- Size 154KB
- Sample220413-l9mkfaecd4
- SHA256 8216e4c1977597afe01bb3c0a47631bd7608963a38ca6c396790fbf37d0fcffb
- MD5 b8a87406f57b8d0104b3a241fecb13df
- SHA1 45a9e46bb7243531b708adce1f9789db41ceb09d
- SHA512 9701ec02514222be60fa6dc2a174b17788bf218d2a1a352cf92223124fa5856dbf1949950f7066e8382dbe853f7ddab95927e21049637219445d8997964088ab
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
8216e4c1977597afe01bb3c0a47631bd7608963a38ca6c396790fbf37d0fcffb_pidor.xyz_dedob2.exe
Resource
win7-20220331-en
0 signatures
0 seconds
Malware Config
Targets
-
- Target 8216e4c1977597afe01bb3c0a47631bd7608963a38ca6c396790fbf37d0fcffb_pidor.xyz_dedob2.exe
- Size 154KB
- SHA256 8216e4c1977597afe01bb3c0a47631bd7608963a38ca6c396790fbf37d0fcffb
- MD5 b8a87406f57b8d0104b3a241fecb13df
- SHA1 45a9e46bb7243531b708adce1f9789db41ceb09d
- SHA512 9701ec02514222be60fa6dc2a174b17788bf218d2a1a352cf92223124fa5856dbf1949950f7066e8382dbe853f7ddab95927e21049637219445d8997964088ab
- MD5 SHA1 SHA512
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.