General
-
Target
96d019facaf8a26de2300eb6cc84ccfef215193e912f67c9ecafbc7007122ff0
-
Size
705KB
-
Sample
230423-qc5f7sdd99
-
MD5
d29b42d7f15d04821ce343dbfa670bfa
-
SHA1
279481b20f5f555832645482398ba0e86c33f136
-
SHA256
96d019facaf8a26de2300eb6cc84ccfef215193e912f67c9ecafbc7007122ff0
-
SHA512
4ee95a4cca9ff7e1aea27cda1e632b66da80457390580cb53d87995e2cf6870b5d0482dfcb1d0a3c398671042b0e44d2bd3c870b9d2a4dd474231ad8feda0d59
-
SSDEEP
12288:ny90iE0TC8N71zAfREjZujIxDFDYZ/0rWJ895g2PoyzPh6dzYUdFH/63K:nydE0rN71sZiojgJSV0tAykdUUdh/6a
Static task
static1
Malware Config
Targets
-
-
Target
96d019facaf8a26de2300eb6cc84ccfef215193e912f67c9ecafbc7007122ff0
-
Size
705KB
-
MD5
d29b42d7f15d04821ce343dbfa670bfa
-
SHA1
279481b20f5f555832645482398ba0e86c33f136
-
SHA256
96d019facaf8a26de2300eb6cc84ccfef215193e912f67c9ecafbc7007122ff0
-
SHA512
4ee95a4cca9ff7e1aea27cda1e632b66da80457390580cb53d87995e2cf6870b5d0482dfcb1d0a3c398671042b0e44d2bd3c870b9d2a4dd474231ad8feda0d59
-
SSDEEP
12288:ny90iE0TC8N71zAfREjZujIxDFDYZ/0rWJ895g2PoyzPh6dzYUdFH/63K:nydE0rN71sZiojgJSV0tAykdUUdh/6a
-
Executes dropped EXE
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-