General
- Target 18b69329c39ad2ce3df2965834a11bdf.exe
- Size 212KB
- Sample230417-gdfd2adb52
- SHA256 8d2ae0363e3aef4a75785737bbfe64fa85ec9af8a2e297cc8dfb56b8e5a62d01
- MD5 18b69329c39ad2ce3df2965834a11bdf
- SHA1 2bf1df1b70ed0de8265ffb8a4cc41eff5b98090a
- SHA512 c89b0628327e080ae5006776329f3217d633c373c33b04532225231358f3eeef21da42fd038b354d7c7e5944d05244c19f7b6ba5080fbcc53fb004f5678315cc
- SSDEEP 3072:qBiBK8RXjrfUe/Kxua1Stsdj3y4Q53X1PoI7inqjZdq:OEVfGuwStsdj3Ip7inx
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
18b69329c39ad2ce3df2965834a11bdf.exe
Resource
win7-20230220-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 18b69329c39ad2ce3df2965834a11bdf.exe
- Size 212KB
- SHA256 8d2ae0363e3aef4a75785737bbfe64fa85ec9af8a2e297cc8dfb56b8e5a62d01
- MD5 18b69329c39ad2ce3df2965834a11bdf
- SHA1 2bf1df1b70ed0de8265ffb8a4cc41eff5b98090a
- SHA512 c89b0628327e080ae5006776329f3217d633c373c33b04532225231358f3eeef21da42fd038b354d7c7e5944d05244c19f7b6ba5080fbcc53fb004f5678315cc
- SSDEEP 3072:qBiBK8RXjrfUe/Kxua1Stsdj3y4Q53X1PoI7inqjZdq:OEVfGuwStsdj3Ip7inx
- MD5 SHA1 SHA512 SSDEEP
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.