General
- Target file.exe
- Size 2.1MB
- Sample221122-ld6y7sgf86
- SHA256 ddf46263a07e42ae3c237f9745d49df8dc803c4c3b9b423cb335f9fbc21e57cc
- MD5 419182848335b236c9c97539679b4c9e
- SHA1 e891cf98d039ccd3b125e45791f4488bf993f2b4
- SHA512 68bfe14b4020d0921eae7319424dc818f8646927d8bf926592ed69cef112cea7751abccba02c2e24209af500c70348cd4683f8ee2a6d065ef9d2ae51da48f5e7
- SSDEEP 49152:mwm9kQv2FJ6bSs55NuTWhGEPPWn773GJ1paNmhJLRfWLqmAuFIIhGjjjad3:xm+Qv2FJ6Os5dhGEPk72JHLRfsqmxFI6
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 2.1MB
- SHA256 ddf46263a07e42ae3c237f9745d49df8dc803c4c3b9b423cb335f9fbc21e57cc
- MD5 419182848335b236c9c97539679b4c9e
- SHA1 e891cf98d039ccd3b125e45791f4488bf993f2b4
- SHA512 68bfe14b4020d0921eae7319424dc818f8646927d8bf926592ed69cef112cea7751abccba02c2e24209af500c70348cd4683f8ee2a6d065ef9d2ae51da48f5e7
- SSDEEP 49152:mwm9kQv2FJ6bSs55NuTWhGEPPWn773GJ1paNmhJLRfWLqmAuFIIhGjjjad3:xm+Qv2FJ6Os5dhGEPk72JHLRfsqmxFI6
- MD5 SHA1 SHA512 SSDEEP
-
Uses the VBS compiler for execution
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of SetThreadContext