General
-
Target
21e4c999735b8078454d3407c9556aade8d9d477c3b7d2aebc3eee5b5670a3bd.zip
-
Size
6.4MB
-
Sample
230321-qpvsjaae49
-
MD5
3a4eb5a608a7f698f94591e13dcda568
-
SHA1
7a96a680b739713280450a0d480001c48cce08a4
-
SHA256
73bd16b792c74493d0f7d5e5e1d613c094b299b9f71398e94bd9250501e53e66
-
SHA512
69a2504ac8f3d0232de6efcff640166e1459f30363f4673b9299f2cb4684cda27024b62d5dcd130fbd90f70ce086f2921e02bfcc4e4a470820686c9d8ce025af
-
SSDEEP
98304:AzReWpTJ0mLo+3ccQB/QsFy9jkOfZmtWq+9Gym8lmgvQWIj1hVtNP7Xo0XpMuYbe:AzRlpJajPbOhmtWRdjQj7xt8bS7/
Static task
static1
Behavioral task
behavioral1
Sample
21e4c999735b8078454d3407c9556aade8d9d477c3b7d2aebc3eee5b5670a3bd.exe
Resource
win7-20230220-en
Malware Config
Targets
-
-
Target
21e4c999735b8078454d3407c9556aade8d9d477c3b7d2aebc3eee5b5670a3bd.exe
-
Size
6.8MB
-
MD5
31a11a0b81f43eeb43887467bbebf5fd
-
SHA1
187eb286dd68d8421c55a8615ab584cdc280b108
-
SHA256
21e4c999735b8078454d3407c9556aade8d9d477c3b7d2aebc3eee5b5670a3bd
-
SHA512
924efe7a92bac35662e5a0e12f49ee18fcd37866d9e2fe7fed3776bc94d87c3a738bffa9bf1b87b47dc1a58154160f5bea2cb026b8204aecaa3cca759386a0f8
-
SSDEEP
98304:zNESvhK3NdZ79CL5ii5wSreJUHKX0l+6p1TzUbjOl9czfxkcVrnkF9QUa8RP:5dKV9CYSwSrgUHKXXKijWWzfxkornzc
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-