General
-
Target
1af407950c398dab06e911eb8fbcc8f4de20afa4320b2874576963056968b44b
-
Size
705KB
-
Sample
230423-ly8crsec7z
-
MD5
e657334698a75f67ad422545cb5ab54d
-
SHA1
0e6cbe786dafbf1161223aa370e90e9c90e67893
-
SHA256
1af407950c398dab06e911eb8fbcc8f4de20afa4320b2874576963056968b44b
-
SHA512
87a2e5df839bf1de123efe8730ed33e7489b672bbcb814357acbb981b268af146644d2f2a58c08d4af113275676617858a0dffe2086d25c1c19b7a744992019e
-
SSDEEP
12288:iy90mWWzs8Gz2ScJ1yu8L6cGGIqeJSZRSTUionOqPTcIgm:iyzJGXcJ1yu1c9QKR8UionOq4IH
Static task
static1
Malware Config
Targets
-
-
Target
1af407950c398dab06e911eb8fbcc8f4de20afa4320b2874576963056968b44b
-
Size
705KB
-
MD5
e657334698a75f67ad422545cb5ab54d
-
SHA1
0e6cbe786dafbf1161223aa370e90e9c90e67893
-
SHA256
1af407950c398dab06e911eb8fbcc8f4de20afa4320b2874576963056968b44b
-
SHA512
87a2e5df839bf1de123efe8730ed33e7489b672bbcb814357acbb981b268af146644d2f2a58c08d4af113275676617858a0dffe2086d25c1c19b7a744992019e
-
SSDEEP
12288:iy90mWWzs8Gz2ScJ1yu8L6cGGIqeJSZRSTUionOqPTcIgm:iyzJGXcJ1yu1c9QKR8UionOq4IH
-
Executes dropped EXE
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-