General
-
Target
Password Cracker_4.26.exe
-
Size
4.0MB
-
Sample
230416-kj61qabb8s
-
MD5
b67a13a4e25cf4cec8b2bbacef5c17ad
-
SHA1
4192f03245e839e822a1897c5f3dcd60edd673b8
-
SHA256
728d9e8da260da76ebe373d84e3351eba1b13eb4e7fb13c17dec02c1c9747241
-
SHA512
be9ac3179d0b1644b440cd4abe79eed4269c677d461413459b82a396c7cb9b9109d53885bea11c03c56cfd528e13f59907fcacaf9c7865bdf08d4d376d15654b
-
SSDEEP
98304:+m/RjCO4YllEoGmEZuXs6YyqAFL4a6Nj0uNvbvVv/HMqy631:+YjP4GGDkYyL4fNj0AbFb1
Static task
static1
Behavioral task
behavioral1
Sample
Password Cracker_4.26.exe
Resource
win10v2004-20230220-en
Malware Config
Targets
-
-
Target
Password Cracker_4.26.exe
-
Size
4.0MB
-
MD5
b67a13a4e25cf4cec8b2bbacef5c17ad
-
SHA1
4192f03245e839e822a1897c5f3dcd60edd673b8
-
SHA256
728d9e8da260da76ebe373d84e3351eba1b13eb4e7fb13c17dec02c1c9747241
-
SHA512
be9ac3179d0b1644b440cd4abe79eed4269c677d461413459b82a396c7cb9b9109d53885bea11c03c56cfd528e13f59907fcacaf9c7865bdf08d4d376d15654b
-
SSDEEP
98304:+m/RjCO4YllEoGmEZuXs6YyqAFL4a6Nj0uNvbvVv/HMqy631:+YjP4GGDkYyL4fNj0AbFb1
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks for any installed AV software in registry
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-