Resubmissions
20-02-2023 05:27
230220-f5xa7ahg79 10General
-
Target
Installer.exe
-
Size
7.5MB
-
Sample
230220-f5xa7ahg79
-
MD5
b2c713fe8dbaea840c00afd0f67f1d9d
-
SHA1
036dab17619a4ca6e1036d99b68b10aea5872968
-
SHA256
cd4b68e09b54472b54dba4f789f0d20ae4706fa9f6d4c90820db12fb956e1707
-
SHA512
03276046a65a6fda948f63d3e5bb7d4466ff2933677c0f847f927d50b04f3d1600d3c7e5fc905f6a54f2de9fdedc46326d39c160ff37d3a4cd874d20f01cef18
-
SSDEEP
24576:24wquL3a5sUcuADwRSP5C5AG1yO80IpNKF7r1IlP6jBktGr4ICqJIJFTWjiQWdtC:CquL38soADw45Ccgk+lKCtoPEz1b
Static task
static1
Behavioral task
behavioral1
Sample
Installer.exe
Resource
win7-20220812-en
Malware Config
Extracted
aurora
94.142.138.29:8081
Targets
-
-
Target
Installer.exe
-
Size
7.5MB
-
MD5
b2c713fe8dbaea840c00afd0f67f1d9d
-
SHA1
036dab17619a4ca6e1036d99b68b10aea5872968
-
SHA256
cd4b68e09b54472b54dba4f789f0d20ae4706fa9f6d4c90820db12fb956e1707
-
SHA512
03276046a65a6fda948f63d3e5bb7d4466ff2933677c0f847f927d50b04f3d1600d3c7e5fc905f6a54f2de9fdedc46326d39c160ff37d3a4cd874d20f01cef18
-
SSDEEP
24576:24wquL3a5sUcuADwRSP5C5AG1yO80IpNKF7r1IlP6jBktGr4ICqJIJFTWjiQWdtC:CquL38soADw45Ccgk+lKCtoPEz1b
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of SetThreadContext
-