General
-
Target
28e7bb42438e1c8e0cb9057717116d5e56fbe67c9779f7946a5f0f85f26db89b
-
Size
1.0MB
-
Sample
220615-tj4p2ahcc2
-
MD5
553d1e382f923f744c32fc9b32286e3e
-
SHA1
3bdb700a98aeec454b59bd826f0fcd04cee29cdc
-
SHA256
28e7bb42438e1c8e0cb9057717116d5e56fbe67c9779f7946a5f0f85f26db89b
-
SHA512
3d39f2b3ddf813d1b8b654e469bfa8b8f68fb3bee6823f7e49dab1add9920e4e7fdc8ff89a0d73c730e61128bcf86b162796232bbba1bbbcd3a7675817e36ccf
Static task
static1
Behavioral task
behavioral1
Sample
28e7bb42438e1c8e0cb9057717116d5e56fbe67c9779f7946a5f0f85f26db89b.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
28e7bb42438e1c8e0cb9057717116d5e56fbe67c9779f7946a5f0f85f26db89b.exe
Resource
win10v2004-20220414-en
Malware Config
Extracted
C:\README1.txt
http://cryptsen7fo43rr6.onion/
http://cryptsen7fo43rr6.onion.to/
http://cryptsen7fo43rr6.onion.cab/
Extracted
C:\README2.txt
http://cryptsen7fo43rr6.onion/
http://cryptsen7fo43rr6.onion.to/
http://cryptsen7fo43rr6.onion.cab/
Extracted
C:\README3.txt
http://cryptsen7fo43rr6.onion/
http://cryptsen7fo43rr6.onion.to/
http://cryptsen7fo43rr6.onion.cab/
Extracted
C:\README4.txt
http://cryptsen7fo43rr6.onion/
http://cryptsen7fo43rr6.onion.to/
http://cryptsen7fo43rr6.onion.cab/
Extracted
C:\README5.txt
http://cryptsen7fo43rr6.onion/
http://cryptsen7fo43rr6.onion.to/
http://cryptsen7fo43rr6.onion.cab/
Extracted
C:\README6.txt
http://cryptsen7fo43rr6.onion/
http://cryptsen7fo43rr6.onion.to/
http://cryptsen7fo43rr6.onion.cab/
Extracted
C:\README7.txt
http://cryptsen7fo43rr6.onion/
http://cryptsen7fo43rr6.onion.to/
http://cryptsen7fo43rr6.onion.cab/
Extracted
C:\README8.txt
http://cryptsen7fo43rr6.onion/
http://cryptsen7fo43rr6.onion.to/
http://cryptsen7fo43rr6.onion.cab/
Extracted
C:\README9.txt
http://cryptsen7fo43rr6.onion/
http://cryptsen7fo43rr6.onion.to/
http://cryptsen7fo43rr6.onion.cab/
Extracted
C:\README10.txt
http://cryptsen7fo43rr6.onion/
http://cryptsen7fo43rr6.onion.to/
http://cryptsen7fo43rr6.onion.cab/
Targets
-
-
Target
28e7bb42438e1c8e0cb9057717116d5e56fbe67c9779f7946a5f0f85f26db89b
-
Size
1.0MB
-
MD5
553d1e382f923f744c32fc9b32286e3e
-
SHA1
3bdb700a98aeec454b59bd826f0fcd04cee29cdc
-
SHA256
28e7bb42438e1c8e0cb9057717116d5e56fbe67c9779f7946a5f0f85f26db89b
-
SHA512
3d39f2b3ddf813d1b8b654e469bfa8b8f68fb3bee6823f7e49dab1add9920e4e7fdc8ff89a0d73c730e61128bcf86b162796232bbba1bbbcd3a7675817e36ccf
Score10/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-