General
-
Target
4ad21e7e0b29e38f26c09e96dc1278215c5292af193356b9de076bb7c72bd4ea
-
Size
707KB
-
Sample
230425-mb62vshg96
-
MD5
4c50e2e36ad0c24a32fc682f9a8a0b22
-
SHA1
bad771c7b11f9e2ca273075062acbd55ec7f3292
-
SHA256
4ad21e7e0b29e38f26c09e96dc1278215c5292af193356b9de076bb7c72bd4ea
-
SHA512
dae530002a44a5d67183ec727dddedcec286455a879f0a8840a8ec7642658340aac5e5b1ec389795a21a5bd68ef192acd40331d996c12751385979f290443f11
-
SSDEEP
12288:Cy90zNn84jq6GC7ORnE2OB976S7wu8nu24ysTHSTQnvkm4qb2A/+Eoy5gEGh:CyINnYEx2SUu8D4PHXvAsqEmh
Static task
static1
Malware Config
Targets
-
-
Target
4ad21e7e0b29e38f26c09e96dc1278215c5292af193356b9de076bb7c72bd4ea
-
Size
707KB
-
MD5
4c50e2e36ad0c24a32fc682f9a8a0b22
-
SHA1
bad771c7b11f9e2ca273075062acbd55ec7f3292
-
SHA256
4ad21e7e0b29e38f26c09e96dc1278215c5292af193356b9de076bb7c72bd4ea
-
SHA512
dae530002a44a5d67183ec727dddedcec286455a879f0a8840a8ec7642658340aac5e5b1ec389795a21a5bd68ef192acd40331d996c12751385979f290443f11
-
SSDEEP
12288:Cy90zNn84jq6GC7ORnE2OB976S7wu8nu24ysTHSTQnvkm4qb2A/+Eoy5gEGh:CyINnYEx2SUu8D4PHXvAsqEmh
-
Executes dropped EXE
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-