General
- Target file.exe
- Size 194KB
- Sample230209-3xahsade7s
- SHA256 756fdad2d0d9ea070a7bdcf7aad06d0b3d442b8e31e2e7b28315a473bf2da981
- MD5 baf3604306b1a9eaa963aa3de73ffa5d
- SHA1 dcc385d753b68fa79e6a8ee664fccd1e5e2c663f
- SHA512 1c7f3abadd07f223375d85f30e3979e21c9d0e42beddcb8f4fd7dc45cf020de4ff9af11715c88be67e6bbdd46d69ba8923db4eebcba23a431a44c27091c3d365
- SSDEEP 3072:lEmvT+0qrfypbtRvnit8kyv5fieA+b5SVpIOjEPEg8cw1JgJF8:2mb+0G8Rfit8kyv555SHjVgzw1JG8
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 194KB
- SHA256 756fdad2d0d9ea070a7bdcf7aad06d0b3d442b8e31e2e7b28315a473bf2da981
- MD5 baf3604306b1a9eaa963aa3de73ffa5d
- SHA1 dcc385d753b68fa79e6a8ee664fccd1e5e2c663f
- SHA512 1c7f3abadd07f223375d85f30e3979e21c9d0e42beddcb8f4fd7dc45cf020de4ff9af11715c88be67e6bbdd46d69ba8923db4eebcba23a431a44c27091c3d365
- SSDEEP 3072:lEmvT+0qrfypbtRvnit8kyv5fieA+b5SVpIOjEPEg8cw1JgJF8:2mb+0G8Rfit8kyv555SHjVgzw1JG8
- MD5 SHA1 SHA512 SSDEEP
-
Downloads MZ/PE file
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.