General
-
Target
0d6804e83ff5775c4f6a162c9761c7e2.exe
-
Size
669KB
-
Sample
220927-gjlg8sdgbr
-
MD5
0d6804e83ff5775c4f6a162c9761c7e2
-
SHA1
6eb877d9710253e460d5d697962cb660118c5533
-
SHA256
78fd273090d2697ec2d7bf6b2d300413dc92d6f25c05443e80e7d3f0f9d8867c
-
SHA512
20c2aafb91cfa8b05152c451901342514b6290ae8351e830fbf1f696352b0fbc26d5b9960da88c02f7b6a08afb221b22b17c36253ddd84def413ba0798f83ea0
-
SSDEEP
6144:YwcBjzPhD7WygeeMeGlsK7Sd7SEmGva9pqPQ1W2wPW7mYiV6H58:JaVRj7MOE9v11W7Tie58
Static task
static1
Behavioral task
behavioral1
Sample
0d6804e83ff5775c4f6a162c9761c7e2.exe
Resource
win7-20220812-en
Malware Config
Extracted
vidar
54.6
1680
https://t.me/huobiinside
https://mas.to/@kyriazhs1975
-
profile_id
1680
Targets
-
-
Target
0d6804e83ff5775c4f6a162c9761c7e2.exe
-
Size
669KB
-
MD5
0d6804e83ff5775c4f6a162c9761c7e2
-
SHA1
6eb877d9710253e460d5d697962cb660118c5533
-
SHA256
78fd273090d2697ec2d7bf6b2d300413dc92d6f25c05443e80e7d3f0f9d8867c
-
SHA512
20c2aafb91cfa8b05152c451901342514b6290ae8351e830fbf1f696352b0fbc26d5b9960da88c02f7b6a08afb221b22b17c36253ddd84def413ba0798f83ea0
-
SSDEEP
6144:YwcBjzPhD7WygeeMeGlsK7Sd7SEmGva9pqPQ1W2wPW7mYiV6H58:JaVRj7MOE9v11W7Tie58
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of SetThreadContext
-