General
-
Target
ad18d4e35a64de46a7dcfa1e40cfd58a22f599aa6857d81a719dc0f696997705
-
Size
564KB
-
Sample
230424-akazkagg37
-
MD5
e6927c6a033ce059406ce4aa7f76a874
-
SHA1
f54e9ddd311777b4ab3cf10bcb50e5530a8fb75b
-
SHA256
ad18d4e35a64de46a7dcfa1e40cfd58a22f599aa6857d81a719dc0f696997705
-
SHA512
41028b364cdf77e83ccdb8749f9580c0503fbf43f0f67c4ed749a5fd8b30e8438280c2e4a529c9351064f27f395190eefcd09eafe1c817effce519a1969115b7
-
SSDEEP
12288:Hy903sZO0apN7C4ygKWuTCsJb+CELB6ITyzy0/xcnMaILJxSt+RX:Hy40apc4vKWWbNEFlqN/x8FcWKX
Static task
static1
Malware Config
Targets
-
-
Target
ad18d4e35a64de46a7dcfa1e40cfd58a22f599aa6857d81a719dc0f696997705
-
Size
564KB
-
MD5
e6927c6a033ce059406ce4aa7f76a874
-
SHA1
f54e9ddd311777b4ab3cf10bcb50e5530a8fb75b
-
SHA256
ad18d4e35a64de46a7dcfa1e40cfd58a22f599aa6857d81a719dc0f696997705
-
SHA512
41028b364cdf77e83ccdb8749f9580c0503fbf43f0f67c4ed749a5fd8b30e8438280c2e4a529c9351064f27f395190eefcd09eafe1c817effce519a1969115b7
-
SSDEEP
12288:Hy903sZO0apN7C4ygKWuTCsJb+CELB6ITyzy0/xcnMaILJxSt+RX:Hy40apc4vKWWbNEFlqN/x8FcWKX
-
Executes dropped EXE
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-