General
-
Target
4d71cb1ffe532720f4e7b2719a527198e6cc9d81a83c903173564cd3a94eb9bd
-
Size
563KB
-
Sample
230424-dgtjaaba9t
-
MD5
fc6809eb300c89e4aea77e42930a0aa7
-
SHA1
a1828cf5560f514a4f2a7ecac48b25f52be8824f
-
SHA256
4d71cb1ffe532720f4e7b2719a527198e6cc9d81a83c903173564cd3a94eb9bd
-
SHA512
cc73960fe4b75575a94256eaf564cae12bf5bbb050406deaedb41359cdac22778d218d1566666608fc9157de92a2cb6f8456b3db2a68005de81c2a1c9ada6683
-
SSDEEP
12288:Yy90sOG2HHqkl1TcZJ6KovsIq7uGukVIi3Uv7u:YyyGsHql6lvdgu0IjK
Static task
static1
Malware Config
Targets
-
-
Target
4d71cb1ffe532720f4e7b2719a527198e6cc9d81a83c903173564cd3a94eb9bd
-
Size
563KB
-
MD5
fc6809eb300c89e4aea77e42930a0aa7
-
SHA1
a1828cf5560f514a4f2a7ecac48b25f52be8824f
-
SHA256
4d71cb1ffe532720f4e7b2719a527198e6cc9d81a83c903173564cd3a94eb9bd
-
SHA512
cc73960fe4b75575a94256eaf564cae12bf5bbb050406deaedb41359cdac22778d218d1566666608fc9157de92a2cb6f8456b3db2a68005de81c2a1c9ada6683
-
SSDEEP
12288:Yy90sOG2HHqkl1TcZJ6KovsIq7uGukVIi3Uv7u:YyyGsHql6lvdgu0IjK
-
Executes dropped EXE
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-