General
-
Target
file.exe
-
Size
298KB
-
Sample
220920-cdt5zabgg2
-
MD5
6e55a48e462fe19cde26ab662cba6621
-
SHA1
8280f6bdf2fc5d2a97a25946ec776cffbde64fb5
-
SHA256
d858f935b50e98ec5892abd549e73d303138cb2818436a270714537ab2f2664c
-
SHA512
dd3eac61d579ce1182bb9f447741d8edaffedc56f687e4cebe413522e9affd5f67b492ca19992da6871f408aa72d88ac4fa9a9de6fca7c2971f867c93c79171d
-
SSDEEP
6144:dG+nl1pR6EkMN9F8fXtCGuu8mhU1Khn8cscstntJApA7aDnD:M+tR6EkMN9F8fXcGuudhDpstntJ6A2TD
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
Malware Config
Targets
-
-
Target
file.exe
-
Size
298KB
-
MD5
6e55a48e462fe19cde26ab662cba6621
-
SHA1
8280f6bdf2fc5d2a97a25946ec776cffbde64fb5
-
SHA256
d858f935b50e98ec5892abd549e73d303138cb2818436a270714537ab2f2664c
-
SHA512
dd3eac61d579ce1182bb9f447741d8edaffedc56f687e4cebe413522e9affd5f67b492ca19992da6871f408aa72d88ac4fa9a9de6fca7c2971f867c93c79171d
-
SSDEEP
6144:dG+nl1pR6EkMN9F8fXtCGuu8mhU1Khn8cscstntJApA7aDnD:M+tR6EkMN9F8fXcGuudhDpstntJ6A2TD
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-