General
-
Target
abe4d0fe62e083e04e8c55a9988cdf97a6b1d0229771874ee8c46488d1bdc10d
-
Size
480KB
-
Sample
221124-exy95sgg39
-
MD5
3bb8bae41ded94cb3f961f992b5598ff
-
SHA1
81b32fc9b49fe072afe3dade910ae59df6afbf25
-
SHA256
abe4d0fe62e083e04e8c55a9988cdf97a6b1d0229771874ee8c46488d1bdc10d
-
SHA512
3e9001f9fe23bd85fa36599fb5027516698e25ba6e7232bef84e4491840359505125be51841cceecea428c010087da64d61f302e7305df8ac9843fdec3ebedd0
-
SSDEEP
6144:ELPR3Ff6La0csj61smJp/KynSjLR+guvNH+JWUiuX1UJbiPBy9x:K3Ff70cZsmJpBnG+dFHAPnUBMcx
Static task
static1
Behavioral task
behavioral1
Sample
abe4d0fe62e083e04e8c55a9988cdf97a6b1d0229771874ee8c46488d1bdc10d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
abe4d0fe62e083e04e8c55a9988cdf97a6b1d0229771874ee8c46488d1bdc10d.exe
Resource
win10v2004-20220901-en
Malware Config
Extracted
C:\$Recycle.Bin\S-1-5-21-575491160-2295418218-1540667289-1000\_ReCoVeRy_+eiwqm.txt
http://t54ndnku456ngkwsudqer.wallymac.com/AB0C85B23396F56
http://po4dbsjbneljhrlbvaueqrgveatv.bonmawp.at/AB0C85B23396F56
http://hrfgd74nfksjdcnnklnwefvdsf.materdunst.com/AB0C85B23396F56
http://xlowfznrg4wf7dli.onion/AB0C85B23396F56
Targets
-
-
Target
abe4d0fe62e083e04e8c55a9988cdf97a6b1d0229771874ee8c46488d1bdc10d
-
Size
480KB
-
MD5
3bb8bae41ded94cb3f961f992b5598ff
-
SHA1
81b32fc9b49fe072afe3dade910ae59df6afbf25
-
SHA256
abe4d0fe62e083e04e8c55a9988cdf97a6b1d0229771874ee8c46488d1bdc10d
-
SHA512
3e9001f9fe23bd85fa36599fb5027516698e25ba6e7232bef84e4491840359505125be51841cceecea428c010087da64d61f302e7305df8ac9843fdec3ebedd0
-
SSDEEP
6144:ELPR3Ff6La0csj61smJp/KynSjLR+guvNH+JWUiuX1UJbiPBy9x:K3Ff70cZsmJpBnG+dFHAPnUBMcx
Score10/10-
Executes dropped EXE
-
Deletes itself
-
Adds Run key to start application
-