General
-
Target
264210d36cbd2afd7e412e3639844eb7cf89c344ecf8cf498d9cb90a9777d6a7
-
Size
1.3MB
-
Sample
220616-k2y3tscabn
-
MD5
a72a60a337085a51cfb5c4268281f604
-
SHA1
c9cd515240c27dfe581237b6ff56bc507e5ddffb
-
SHA256
264210d36cbd2afd7e412e3639844eb7cf89c344ecf8cf498d9cb90a9777d6a7
-
SHA512
58c0eada2738094ea12e49ff39a46971d307119778e8325830209f85f2b7f2945ec08dcb7db03d5cc51a57de2bfcff09da48be962da884ae45773073111d415a
Static task
static1
Behavioral task
behavioral1
Sample
264210d36cbd2afd7e412e3639844eb7cf89c344ecf8cf498d9cb90a9777d6a7.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
264210d36cbd2afd7e412e3639844eb7cf89c344ecf8cf498d9cb90a9777d6a7.exe
Resource
win10v2004-20220414-en
Malware Config
Extracted
C:\README1.txt
http://cryptsen7fo43rr6.onion/
http://cryptsen7fo43rr6.onion.to/
http://cryptsen7fo43rr6.onion.cab/
Extracted
C:\README2.txt
http://cryptsen7fo43rr6.onion/
http://cryptsen7fo43rr6.onion.to/
http://cryptsen7fo43rr6.onion.cab/
Extracted
C:\README3.txt
http://cryptsen7fo43rr6.onion/
http://cryptsen7fo43rr6.onion.to/
http://cryptsen7fo43rr6.onion.cab/
Extracted
C:\README4.txt
http://cryptsen7fo43rr6.onion/
http://cryptsen7fo43rr6.onion.to/
http://cryptsen7fo43rr6.onion.cab/
Extracted
C:\README5.txt
http://cryptsen7fo43rr6.onion/
http://cryptsen7fo43rr6.onion.to/
http://cryptsen7fo43rr6.onion.cab/
Extracted
C:\README6.txt
http://cryptsen7fo43rr6.onion/
http://cryptsen7fo43rr6.onion.to/
http://cryptsen7fo43rr6.onion.cab/
Extracted
C:\README7.txt
http://cryptsen7fo43rr6.onion/
http://cryptsen7fo43rr6.onion.to/
http://cryptsen7fo43rr6.onion.cab/
Extracted
C:\README8.txt
http://cryptsen7fo43rr6.onion/
http://cryptsen7fo43rr6.onion.to/
http://cryptsen7fo43rr6.onion.cab/
Extracted
C:\README9.txt
http://cryptsen7fo43rr6.onion/
http://cryptsen7fo43rr6.onion.to/
http://cryptsen7fo43rr6.onion.cab/
Extracted
C:\README10.txt
http://cryptsen7fo43rr6.onion/
http://cryptsen7fo43rr6.onion.to/
http://cryptsen7fo43rr6.onion.cab/
Targets
-
-
Target
264210d36cbd2afd7e412e3639844eb7cf89c344ecf8cf498d9cb90a9777d6a7
-
Size
1.3MB
-
MD5
a72a60a337085a51cfb5c4268281f604
-
SHA1
c9cd515240c27dfe581237b6ff56bc507e5ddffb
-
SHA256
264210d36cbd2afd7e412e3639844eb7cf89c344ecf8cf498d9cb90a9777d6a7
-
SHA512
58c0eada2738094ea12e49ff39a46971d307119778e8325830209f85f2b7f2945ec08dcb7db03d5cc51a57de2bfcff09da48be962da884ae45773073111d415a
Score10/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-