General
- Target file.exe
- Size 4.2MB
- Sample220910-sk6eksacd4
- SHA256 883e12a7cd81c09838284e4dbda9caa9d8df6ac57234e14ee0ee02bb2fcc2329
- MD5 e3e72ce16d5b1a87751d483a9eeda4ea
- SHA1 c038cfb9cc489ffc3df7ae9dfd18b9f170889d34
- SHA512 7d831dfe40251def846008d48922ea6047d4f14b5e6baeffd8c75c5b6f05278137104a047f677a036736084901b60a3e6f1d62550e26ad4dec56f29b2af2163a
- SSDEEP 49152:Jas5FDPBdlJbOdjTltvyiwVLn+4FJ3CqKhawlquAb7/iO:JayPBKjrvB14FJj/iO
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220901-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 4.2MB
- SHA256 883e12a7cd81c09838284e4dbda9caa9d8df6ac57234e14ee0ee02bb2fcc2329
- MD5 e3e72ce16d5b1a87751d483a9eeda4ea
- SHA1 c038cfb9cc489ffc3df7ae9dfd18b9f170889d34
- SHA512 7d831dfe40251def846008d48922ea6047d4f14b5e6baeffd8c75c5b6f05278137104a047f677a036736084901b60a3e6f1d62550e26ad4dec56f29b2af2163a
- SSDEEP 49152:Jas5FDPBdlJbOdjTltvyiwVLn+4FJ3CqKhawlquAb7/iO:JayPBKjrvB14FJj/iO
- MD5 SHA1 SHA512 SSDEEP
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.