General
- Target Launcher.exe
- Size 6.6MB
- Sample220504-sdblmaebc5
- SHA256 08ff371dff7eb8283c675a14af2477eede676756cdd4d2252ee7239140445ec9
- MD5 0ea9e4480f9a76c6f77025f737404637
- SHA1 a05a66e58e80110ce7748a80274e1127814eebab
- SHA512 c1e6731446cd34340bb38b2e3ddcab0a25acae9ffe2c4d24890ddf63b0c27963eb91580e111e279cefd6be2f1ce31424dbfbd4edef912e960941a7d989fb6077
- MD5 SHA1 SHA512
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
Launcher.exe
Resource
win7-20220414-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
Launcher.exe
Resource
win10v2004-20220414-en
0 signatures
0 seconds
Malware Config
Targets
-
- Target Launcher.exe
- Size 6.6MB
- SHA256 08ff371dff7eb8283c675a14af2477eede676756cdd4d2252ee7239140445ec9
- MD5 0ea9e4480f9a76c6f77025f737404637
- SHA1 a05a66e58e80110ce7748a80274e1127814eebab
- SHA512 c1e6731446cd34340bb38b2e3ddcab0a25acae9ffe2c4d24890ddf63b0c27963eb91580e111e279cefd6be2f1ce31424dbfbd4edef912e960941a7d989fb6077
- MD5 SHA1 SHA512
Score8/10-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of SetThreadContext