General
-
Target
2e98b642c968557ef1f7d0d544c4d50238ea8d251d9a9d786f093536cd3e0b74
-
Size
827KB
-
Sample
230419-vl7p5scb83
-
MD5
eca74fed67c404f91b6677140e56b459
-
SHA1
be459c95281dd0b78f7b35b37505ca025c35e644
-
SHA256
2e98b642c968557ef1f7d0d544c4d50238ea8d251d9a9d786f093536cd3e0b74
-
SHA512
5875d3f167b51ed3b2d46ca23fd5ef7b350044dad707658a39104acb8f9967b7c151774d7209cf25b3a307b819a59ce3d813a332049f9df608b61a8a8d6e1ffc
-
SSDEEP
12288:Ly90/LgJoVrcbkK1jgkAUPe/DvJ7cacfQwZ6CwjKjhqBbL:LyymoVoIQjvAUPW17cl4wEljuqBbL
Static task
static1
Malware Config
Targets
-
-
Target
2e98b642c968557ef1f7d0d544c4d50238ea8d251d9a9d786f093536cd3e0b74
-
Size
827KB
-
MD5
eca74fed67c404f91b6677140e56b459
-
SHA1
be459c95281dd0b78f7b35b37505ca025c35e644
-
SHA256
2e98b642c968557ef1f7d0d544c4d50238ea8d251d9a9d786f093536cd3e0b74
-
SHA512
5875d3f167b51ed3b2d46ca23fd5ef7b350044dad707658a39104acb8f9967b7c151774d7209cf25b3a307b819a59ce3d813a332049f9df608b61a8a8d6e1ffc
-
SSDEEP
12288:Ly90/LgJoVrcbkK1jgkAUPe/DvJ7cacfQwZ6CwjKjhqBbL:LyymoVoIQjvAUPW17cl4wEljuqBbL
-
Executes dropped EXE
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-