General
-
Target
2a7e039df0a85a8dd740f779e411fe47d2ffbecac1b9e41ef49c4ecc3bb64840
-
Size
695KB
-
Sample
230425-rddkjsag47
-
MD5
d45f82b98272f1cedb01c2faf5a6de4f
-
SHA1
6ca6384694b516fe144ea4991952acf8f4910b7b
-
SHA256
2a7e039df0a85a8dd740f779e411fe47d2ffbecac1b9e41ef49c4ecc3bb64840
-
SHA512
1e497c4547ef13875513d06d734ab7ea1d7cae6dac11abe6d78018c8096c7be0814e7d675cdbdc0bd1110969a166d9baa16ae89b0b3cdba69e6dc7cc114881e2
-
SSDEEP
12288:py90Z9lRphVbwhekrNN2Yl9jA6rwTwa6F3VGmUL5vleu2Kh+T1ZgKs:pyYlAheUNNPl9j5ZVGmUzWKh+T1s
Static task
static1
Malware Config
Targets
-
-
Target
2a7e039df0a85a8dd740f779e411fe47d2ffbecac1b9e41ef49c4ecc3bb64840
-
Size
695KB
-
MD5
d45f82b98272f1cedb01c2faf5a6de4f
-
SHA1
6ca6384694b516fe144ea4991952acf8f4910b7b
-
SHA256
2a7e039df0a85a8dd740f779e411fe47d2ffbecac1b9e41ef49c4ecc3bb64840
-
SHA512
1e497c4547ef13875513d06d734ab7ea1d7cae6dac11abe6d78018c8096c7be0814e7d675cdbdc0bd1110969a166d9baa16ae89b0b3cdba69e6dc7cc114881e2
-
SSDEEP
12288:py90Z9lRphVbwhekrNN2Yl9jA6rwTwa6F3VGmUL5vleu2Kh+T1ZgKs:pyYlAheUNNPl9j5ZVGmUzWKh+T1s
-
Executes dropped EXE
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-