General
-
Target
7d9227bd1804e57af7b644d711812aaf9c530a5f3775e5f4f8f354744723e18a
-
Size
747KB
-
Sample
230424-za23qsgb6x
-
MD5
26d681e5e2ca74b05168d4db461f1353
-
SHA1
83aa71c90ca4799f4b70e2a882887950460e0922
-
SHA256
7d9227bd1804e57af7b644d711812aaf9c530a5f3775e5f4f8f354744723e18a
-
SHA512
a2749873c4309844fd5fe23eed3b13ee2d37d3b8b18dba906a202e3a058b13626fcfaaa34a96f790223e269fa0874c622c4ec09b7b1baf48530f8968baeeebc1
-
SSDEEP
12288:Oy90ZYlpDosO4hnp2sQhtYbaUg7Yg0496FWAn8bs4wksLm+CTDGa:OyDlpMsO4tpIabM7Yg049kV8bsZx9CTX
Static task
static1
Malware Config
Targets
-
-
Target
7d9227bd1804e57af7b644d711812aaf9c530a5f3775e5f4f8f354744723e18a
-
Size
747KB
-
MD5
26d681e5e2ca74b05168d4db461f1353
-
SHA1
83aa71c90ca4799f4b70e2a882887950460e0922
-
SHA256
7d9227bd1804e57af7b644d711812aaf9c530a5f3775e5f4f8f354744723e18a
-
SHA512
a2749873c4309844fd5fe23eed3b13ee2d37d3b8b18dba906a202e3a058b13626fcfaaa34a96f790223e269fa0874c622c4ec09b7b1baf48530f8968baeeebc1
-
SSDEEP
12288:Oy90ZYlpDosO4hnp2sQhtYbaUg7Yg0496FWAn8bs4wksLm+CTDGa:OyDlpMsO4tpIabM7Yg049kV8bsZx9CTX
-
Executes dropped EXE
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-