General
-
Target
3e2f7f29ee60fbea9fbc392b36617f7ed736fd0dc9f83d245f56fbe41f2a3f7e
-
Size
1.3MB
-
Sample
220701-j8c89sdbh6
-
MD5
c286c0d39d10063eb293498f47e2c339
-
SHA1
1564e28b7b9fe7d4466a91b4ed5f81204f29180e
-
SHA256
3e2f7f29ee60fbea9fbc392b36617f7ed736fd0dc9f83d245f56fbe41f2a3f7e
-
SHA512
6aa90311c383448b33f3fdc0e5a6ad8479ffb71a1e843b257426a84c98d4462183c3c50c6ff2b99ee259b99d0a845c70f0e11b5f6e961d5a9b5392acecc2ea54
Static task
static1
Behavioral task
behavioral1
Sample
3e2f7f29ee60fbea9fbc392b36617f7ed736fd0dc9f83d245f56fbe41f2a3f7e.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
3e2f7f29ee60fbea9fbc392b36617f7ed736fd0dc9f83d245f56fbe41f2a3f7e.exe
Resource
win10v2004-20220414-en
Malware Config
Extracted
C:\README1.txt
http://cryptsen7fo43rr6.onion/
http://cryptsen7fo43rr6.onion.to/
http://cryptsen7fo43rr6.onion.cab/
Extracted
C:\README2.txt
http://cryptsen7fo43rr6.onion/
http://cryptsen7fo43rr6.onion.to/
http://cryptsen7fo43rr6.onion.cab/
Extracted
C:\README3.txt
http://cryptsen7fo43rr6.onion/
http://cryptsen7fo43rr6.onion.to/
http://cryptsen7fo43rr6.onion.cab/
Extracted
C:\README4.txt
http://cryptsen7fo43rr6.onion/
http://cryptsen7fo43rr6.onion.to/
http://cryptsen7fo43rr6.onion.cab/
Extracted
C:\README5.txt
http://cryptsen7fo43rr6.onion/
http://cryptsen7fo43rr6.onion.to/
http://cryptsen7fo43rr6.onion.cab/
Extracted
C:\README6.txt
http://cryptsen7fo43rr6.onion/
http://cryptsen7fo43rr6.onion.to/
http://cryptsen7fo43rr6.onion.cab/
Extracted
C:\README7.txt
http://cryptsen7fo43rr6.onion/
http://cryptsen7fo43rr6.onion.to/
http://cryptsen7fo43rr6.onion.cab/
Extracted
C:\README8.txt
http://cryptsen7fo43rr6.onion/
http://cryptsen7fo43rr6.onion.to/
http://cryptsen7fo43rr6.onion.cab/
Extracted
C:\README9.txt
http://cryptsen7fo43rr6.onion/
http://cryptsen7fo43rr6.onion.to/
http://cryptsen7fo43rr6.onion.cab/
Extracted
C:\README10.txt
http://cryptsen7fo43rr6.onion/
http://cryptsen7fo43rr6.onion.to/
http://cryptsen7fo43rr6.onion.cab/
Targets
-
-
Target
3e2f7f29ee60fbea9fbc392b36617f7ed736fd0dc9f83d245f56fbe41f2a3f7e
-
Size
1.3MB
-
MD5
c286c0d39d10063eb293498f47e2c339
-
SHA1
1564e28b7b9fe7d4466a91b4ed5f81204f29180e
-
SHA256
3e2f7f29ee60fbea9fbc392b36617f7ed736fd0dc9f83d245f56fbe41f2a3f7e
-
SHA512
6aa90311c383448b33f3fdc0e5a6ad8479ffb71a1e843b257426a84c98d4462183c3c50c6ff2b99ee259b99d0a845c70f0e11b5f6e961d5a9b5392acecc2ea54
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-