General
-
Target
531befb6dc095597e7980108cf17892c4cf5749f921d58b78de4433563770295
-
Size
1.2MB
-
Sample
230423-zg3b3shd5x
-
MD5
9b479fa1dd82fafbec3e117cda9cb288
-
SHA1
2574889f3d9eaea9933b0b3c84cb8f92307ad183
-
SHA256
531befb6dc095597e7980108cf17892c4cf5749f921d58b78de4433563770295
-
SHA512
1c7d9699f9c89a5887e11e61c5ff891364bd2ea76522ba659bebd7733af261272ba9fbb4607521562a9297ffe94c54f1f3b8faca1665daa8037488d407d20c27
-
SSDEEP
24576:a8FAGzhOxi/8+hxyHwVrKZzyykcgwIk4vkoFNxeAs:fKoyI1EQVazy0RIk4vkoFHe
Static task
static1
Malware Config
Targets
-
-
Target
531befb6dc095597e7980108cf17892c4cf5749f921d58b78de4433563770295
-
Size
1.2MB
-
MD5
9b479fa1dd82fafbec3e117cda9cb288
-
SHA1
2574889f3d9eaea9933b0b3c84cb8f92307ad183
-
SHA256
531befb6dc095597e7980108cf17892c4cf5749f921d58b78de4433563770295
-
SHA512
1c7d9699f9c89a5887e11e61c5ff891364bd2ea76522ba659bebd7733af261272ba9fbb4607521562a9297ffe94c54f1f3b8faca1665daa8037488d407d20c27
-
SSDEEP
24576:a8FAGzhOxi/8+hxyHwVrKZzyykcgwIk4vkoFNxeAs:fKoyI1EQVazy0RIk4vkoFHe
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-