General
-
Target
0x001b00000001249b-58.dat
-
Size
368KB
-
Sample
230208-bhbnrage67
-
MD5
6ea56f0ff90f1cfe62615fdbdaeb5ba4
-
SHA1
ff2489fb612cb737e21b9013e685afb1ebc2990b
-
SHA256
082dc4388285b15951b87c857703a2fc5aad3bccb0f8c0e4c1445d0c0a6f4cf8
-
SHA512
868bdf4b1ffb4fca16f99fcd3fa4bd484fa7a1a19f96c2da446cd89b71a7c171b752783e07df846360f3f05137c9b6cf8f65dc3bb415dc7dca2c3b675c317818
-
SSDEEP
6144:8Hd2snAZDkCZbuuq3D3Fr6PMXDuOYijvafhtfhDV9nUBi1M2am:8Hd2snsDkCFqDFeMXKujvafhBhDV9se
Behavioral task
behavioral1
Sample
0x001b00000001249b-58.exe
Resource
win7-20220812-en
Malware Config
Targets
-
-
Target
0x001b00000001249b-58.dat
-
Size
368KB
-
MD5
6ea56f0ff90f1cfe62615fdbdaeb5ba4
-
SHA1
ff2489fb612cb737e21b9013e685afb1ebc2990b
-
SHA256
082dc4388285b15951b87c857703a2fc5aad3bccb0f8c0e4c1445d0c0a6f4cf8
-
SHA512
868bdf4b1ffb4fca16f99fcd3fa4bd484fa7a1a19f96c2da446cd89b71a7c171b752783e07df846360f3f05137c9b6cf8f65dc3bb415dc7dca2c3b675c317818
-
SSDEEP
6144:8Hd2snAZDkCZbuuq3D3Fr6PMXDuOYijvafhtfhDV9nUBi1M2am:8Hd2snsDkCFqDFeMXKujvafhBhDV9se
-
Deletes itself
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-