General
-
Target
512587a73cd03c6324ade468689510472c6b9e54074f3cf115aa54393b14f037.exe
-
Size
160KB
-
Sample
230214-prc5tsdc84
-
MD5
152355ae53f89b83d40983afa3d9726b
-
SHA1
8c11109da1d7b9d3e0e173fd24eb4b7462073174
-
SHA256
512587a73cd03c6324ade468689510472c6b9e54074f3cf115aa54393b14f037
-
SHA512
f40a3720d2eed19a65cde2b6ae58e4592ff64df1f404924e2349a35190ac82a0d2a4f156e6c38683f0b894a9734c0ceb2cdd4feabb4570a688a8b8d415a9c2f9
-
SSDEEP
3072:TED2Kh981MM446KtP45ENVvGDGZuqPapy2RH7RDbZTC:Qq745eCoskuqcFDd
Static task
static1
Behavioral task
behavioral1
Sample
512587a73cd03c6324ade468689510472c6b9e54074f3cf115aa54393b14f037.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
512587a73cd03c6324ade468689510472c6b9e54074f3cf115aa54393b14f037.exe
Resource
win10v2004-20221111-en
Malware Config
Extracted
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\chrome_shutdown_ms.txt
fishA001@protonmail.com
Extracted
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\brndlog.txt
fishA001@protonmail.com
Extracted
C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\ErrorPage.html
fishA001@protonmail.com
Extracted
C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\LoadingPage.html
fishA001@protonmail.com
Extracted
C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\TestSharePage.html
fishA001@protonmail.com
Extracted
C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\ThirdPartyNotices.txt
fishA001@protonmail.com
Extracted
C:\Users\Admin\AppData\Local\Temp\dd_NDP472-KB4054530-x86-x64-AllOS-ENU_decompression_log.txt
fishA001@protonmail.com
Extracted
C:\Users\Admin\AppData\Local\Temp\dd_vcredistUI16EC.txt
fishA001@protonmail.com
Extracted
C:\Users\Admin\AppData\Local\Temp\dd_vcredistUI1716.txt
fishA001@protonmail.com
Extracted
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yrilf55p.default-release\pkcs11.txt
fishA001@protonmail.com
Targets
-
-
Target
512587a73cd03c6324ade468689510472c6b9e54074f3cf115aa54393b14f037.exe
-
Size
160KB
-
MD5
152355ae53f89b83d40983afa3d9726b
-
SHA1
8c11109da1d7b9d3e0e173fd24eb4b7462073174
-
SHA256
512587a73cd03c6324ade468689510472c6b9e54074f3cf115aa54393b14f037
-
SHA512
f40a3720d2eed19a65cde2b6ae58e4592ff64df1f404924e2349a35190ac82a0d2a4f156e6c38683f0b894a9734c0ceb2cdd4feabb4570a688a8b8d415a9c2f9
-
SSDEEP
3072:TED2Kh981MM446KtP45ENVvGDGZuqPapy2RH7RDbZTC:Qq745eCoskuqcFDd
Score10/10-
Modifies Installed Components in the registry
-
Drops startup file
-
Drops desktop.ini file(s)
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-