General
- Target file.exe
- Size 358KB
- Sample220915-3ettpsaagk
- SHA256 dfd29461b16401b73544be8cdc5f594e6eb33e98f33c2809e62163aaf6ae72ec
- MD5 c33a73d4a56f74fd979a6f10740a43e8
- SHA1 ba6d82971be7842c76a62969b5bb96af93dd3545
- SHA512 a07af6ca9f75f1bb5fb510700a8a64afcbb18c4c60f5c07fd11477a9bbf04a8c78417115b0520e2f2f7b08f6f7c421bca9da7aae5209d3593e0d7b5d1657e618
- SSDEEP 6144:hS+LoBOsU/hR5u/F++u3VJvcyiQpP9/zuqOmOlRO01niga:htkBOb/hDMg9X9/zuqlOf/1i
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 358KB
- SHA256 dfd29461b16401b73544be8cdc5f594e6eb33e98f33c2809e62163aaf6ae72ec
- MD5 c33a73d4a56f74fd979a6f10740a43e8
- SHA1 ba6d82971be7842c76a62969b5bb96af93dd3545
- SHA512 a07af6ca9f75f1bb5fb510700a8a64afcbb18c4c60f5c07fd11477a9bbf04a8c78417115b0520e2f2f7b08f6f7c421bca9da7aae5209d3593e0d7b5d1657e618
- SSDEEP 6144:hS+LoBOsU/hR5u/F++u3VJvcyiQpP9/zuqOmOlRO01niga:htkBOb/hDMg9X9/zuqlOf/1i
- MD5 SHA1 SHA512 SSDEEP
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.