General
- Target f2d9283406e628606230f215a7e9b833.exe
- Size 212KB
- Sample230417-jttygafa9z
- SHA256 201510c2fb7bd86e61d220e72625750024c6c528df09774bb4a011193cdb5342
- MD5 f2d9283406e628606230f215a7e9b833
- SHA1 40b752d15b9533bde9fbed35e8ff78407295de34
- SHA512 54bf2c661c0e4869f428e65b979ec4ac3dce365f351486efb58b371d7484f7d935128d405651b135a1edeadbd9740810a92fa7782b548f743d3c89978e8c4e02
- SSDEEP 3072:SsiBKtdBXv5p2WUgNEmn6q0Wn2UI7efdssA289A5X9I7iMOsEV:XEG5pvEm6qHn2UI7mdssA2VO7iMbEV
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
f2d9283406e628606230f215a7e9b833.exe
Resource
win7-20230220-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target f2d9283406e628606230f215a7e9b833.exe
- Size 212KB
- SHA256 201510c2fb7bd86e61d220e72625750024c6c528df09774bb4a011193cdb5342
- MD5 f2d9283406e628606230f215a7e9b833
- SHA1 40b752d15b9533bde9fbed35e8ff78407295de34
- SHA512 54bf2c661c0e4869f428e65b979ec4ac3dce365f351486efb58b371d7484f7d935128d405651b135a1edeadbd9740810a92fa7782b548f743d3c89978e8c4e02
- SSDEEP 3072:SsiBKtdBXv5p2WUgNEmn6q0Wn2UI7efdssA289A5X9I7iMOsEV:XEG5pvEm6qHn2UI7mdssA2VO7iMbEV
- MD5 SHA1 SHA512 SSDEEP
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.