General
- Target 1beea5e37ebc1434f4d0b4d2218c8fda.exe
- Size 329KB
- Sample220813-g8xa2aefdm
- SHA256 ba6f5a64ffbc34d1e03a27c5397530dbf5cfab2baf6a7dcf46202aa204d190b8
- MD5 1beea5e37ebc1434f4d0b4d2218c8fda
- SHA1 786ede6245076004b2ff79f63b261c20514fd227
- SHA512 4d21aff421cb23f95755a3a4236f64a129385eb37f5ac6c849bdc6718c46ea177250616750c77e2166f60f4b8f9f5930df141414e16f2233fa56e3a6ba712ec1
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
1beea5e37ebc1434f4d0b4d2218c8fda.exe
Resource
win7-20220812-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 1beea5e37ebc1434f4d0b4d2218c8fda.exe
- Size 329KB
- SHA256 ba6f5a64ffbc34d1e03a27c5397530dbf5cfab2baf6a7dcf46202aa204d190b8
- MD5 1beea5e37ebc1434f4d0b4d2218c8fda
- SHA1 786ede6245076004b2ff79f63b261c20514fd227
- SHA512 4d21aff421cb23f95755a3a4236f64a129385eb37f5ac6c849bdc6718c46ea177250616750c77e2166f60f4b8f9f5930df141414e16f2233fa56e3a6ba712ec1
- MD5 SHA1 SHA512
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of SetThreadContext