General
-
Target
e70d50664f30e1c8c902e4ff4ae3b32bc694d6e29843b86c953e21afbd30b644
-
Size
922KB
-
Sample
230420-3nq46seh4s
-
MD5
829eea2dc842dbd2b8aa91d994b776a1
-
SHA1
4d435468795c48952fda3028d070b8e8d26356e4
-
SHA256
e70d50664f30e1c8c902e4ff4ae3b32bc694d6e29843b86c953e21afbd30b644
-
SHA512
4b73a4158b5b531b47545266db56535ff998cb811bf83749588d5a415386d63373b824c2184b8bb5829d78138badd0f1615eb165ff0380a256ba98e80be4b5d6
-
SSDEEP
24576:Qyo6UVBKIP/Z+wJ2f+B+xQuLovLojZet9:Xo6UDjZdJW+B+xdJt
Static task
static1
Malware Config
Targets
-
-
Target
e70d50664f30e1c8c902e4ff4ae3b32bc694d6e29843b86c953e21afbd30b644
-
Size
922KB
-
MD5
829eea2dc842dbd2b8aa91d994b776a1
-
SHA1
4d435468795c48952fda3028d070b8e8d26356e4
-
SHA256
e70d50664f30e1c8c902e4ff4ae3b32bc694d6e29843b86c953e21afbd30b644
-
SHA512
4b73a4158b5b531b47545266db56535ff998cb811bf83749588d5a415386d63373b824c2184b8bb5829d78138badd0f1615eb165ff0380a256ba98e80be4b5d6
-
SSDEEP
24576:Qyo6UVBKIP/Z+wJ2f+B+xQuLovLojZet9:Xo6UDjZdJW+B+xdJt
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-