General
- Target file.exe
- Size 357KB
- Sample230210-slrb2sfc96
- SHA256 3feecb6e1f0296b7a9cb99e9cde0469c98bd96faed0beda76998893fbdeb9411
- MD5 b063b65e112de3e4d71e34d2ad049f7e
- SHA1 dfda6b6fb21435d275d93e8ff71bbf5063ceeafe
- SHA512 7b5b7b800fcd861cdbc929aeae026572f09aeb4463579f6b3d5dd7c541f7df3d2a6af0660fc542b05b2cf73ec4ef02807da586e2ed9e703a84354b2476c6851d
- SSDEEP 3072:o9Gkbk+xiAG7a4qROHlgQ/bYopV9awkxPoQn5M79nf6Np2G2UU:cH4AGa4FFPYopnZQ+RnfWp2G
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 357KB
- SHA256 3feecb6e1f0296b7a9cb99e9cde0469c98bd96faed0beda76998893fbdeb9411
- MD5 b063b65e112de3e4d71e34d2ad049f7e
- SHA1 dfda6b6fb21435d275d93e8ff71bbf5063ceeafe
- SHA512 7b5b7b800fcd861cdbc929aeae026572f09aeb4463579f6b3d5dd7c541f7df3d2a6af0660fc542b05b2cf73ec4ef02807da586e2ed9e703a84354b2476c6851d
- SSDEEP 3072:o9Gkbk+xiAG7a4qROHlgQ/bYopV9awkxPoQn5M79nf6Np2G2UU:cH4AGa4FFPYopnZQ+RnfWp2G
- MD5 SHA1 SHA512 SSDEEP
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.