General
-
Target
eb84cd44035fec15ed3661fdf5b5bd25c82c85f9bbed2ce122e24bb19f7c82cb
-
Size
746KB
-
Sample
230425-ca3b6sfg94
-
MD5
5dcd4fec70ec67bcd968ddce3a0b2dfd
-
SHA1
6820873b3dbe678006c0bf772f98be9ce7f46a9f
-
SHA256
eb84cd44035fec15ed3661fdf5b5bd25c82c85f9bbed2ce122e24bb19f7c82cb
-
SHA512
ba79ebd3cd4fa19a95033571f63a6a591cba8e8d65015971497d0086a464d18f03a6f99f7cd8f0f0cf8f70d9d67d8d9cf14f3d8689f0e01897a636d3bd954863
-
SSDEEP
12288:gy904l1AdfPq/Gi6K5eMVMsTYfe2ZSuq9YQBtUXp/kNNoc:gyzl1AdfPHi3cM6sYm2ZpwUXQN9
Static task
static1
Malware Config
Targets
-
-
Target
eb84cd44035fec15ed3661fdf5b5bd25c82c85f9bbed2ce122e24bb19f7c82cb
-
Size
746KB
-
MD5
5dcd4fec70ec67bcd968ddce3a0b2dfd
-
SHA1
6820873b3dbe678006c0bf772f98be9ce7f46a9f
-
SHA256
eb84cd44035fec15ed3661fdf5b5bd25c82c85f9bbed2ce122e24bb19f7c82cb
-
SHA512
ba79ebd3cd4fa19a95033571f63a6a591cba8e8d65015971497d0086a464d18f03a6f99f7cd8f0f0cf8f70d9d67d8d9cf14f3d8689f0e01897a636d3bd954863
-
SSDEEP
12288:gy904l1AdfPq/Gi6K5eMVMsTYfe2ZSuq9YQBtUXp/kNNoc:gyzl1AdfPHi3cM6sYm2ZpwUXQN9
-
Executes dropped EXE
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-