General
-
Target
Builder.exe
-
Size
44.3MB
-
Sample
230401-zvv5xscg36
-
MD5
2b3ea74456bb2aaeddeb90438580e72a
-
SHA1
817a0af8b544ce324dbc1d2635dc2a4a45a8d60f
-
SHA256
861fb491a428bedf4581a2e22062cd6b0b483a9727c37cb97dd46ece47853f07
-
SHA512
f82f53e6fc887c3d240189b82859091719d4918fc2cef9831ebb6c215e68e079cd7499e120509b1a40b50c93dd18cf78a2f98b66b172602fcd3f6eba3a68a6c0
-
SSDEEP
786432:hx7blFrUB+WuAZrY6XGc8ZgvnzLmGg1bWJ:hRblBDWlJJlfvRgNWJ
Static task
static1
Behavioral task
behavioral1
Sample
Builder.exe
Resource
win7-20230220-en
Malware Config
Targets
-
-
Target
Builder.exe
-
Size
44.3MB
-
MD5
2b3ea74456bb2aaeddeb90438580e72a
-
SHA1
817a0af8b544ce324dbc1d2635dc2a4a45a8d60f
-
SHA256
861fb491a428bedf4581a2e22062cd6b0b483a9727c37cb97dd46ece47853f07
-
SHA512
f82f53e6fc887c3d240189b82859091719d4918fc2cef9831ebb6c215e68e079cd7499e120509b1a40b50c93dd18cf78a2f98b66b172602fcd3f6eba3a68a6c0
-
SSDEEP
786432:hx7blFrUB+WuAZrY6XGc8ZgvnzLmGg1bWJ:hRblBDWlJJlfvRgNWJ
-
Drops startup file
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-