General
-
Target
00405dd791769402b846d3edcb3d6cb1bd7ff5555055cff437801034356eeae0
-
Size
695KB
-
Sample
230425-x9eelsce65
-
MD5
afd1435f9bc3b30f7b592d1a99d38317
-
SHA1
c02dc890d0236891528a4de858941f4db385632e
-
SHA256
00405dd791769402b846d3edcb3d6cb1bd7ff5555055cff437801034356eeae0
-
SHA512
0afef86964e62c3491adc6e76d9ab5ffd7a90f092199da8687cbdfb3a210c473345ca9f6d7112e5c6f0b6e0ba1f78f37b2a57958bbe636ee4e14db06f918f31c
-
SSDEEP
12288:xy90DW32Zao4AiIgfg6kpD1y4MwgrW1pToUQXzwQ4y0ZU/PzQF/99:xyEUGVJgfgpowgrW1ZHQjwQZbI9
Static task
static1
Malware Config
Targets
-
-
Target
00405dd791769402b846d3edcb3d6cb1bd7ff5555055cff437801034356eeae0
-
Size
695KB
-
MD5
afd1435f9bc3b30f7b592d1a99d38317
-
SHA1
c02dc890d0236891528a4de858941f4db385632e
-
SHA256
00405dd791769402b846d3edcb3d6cb1bd7ff5555055cff437801034356eeae0
-
SHA512
0afef86964e62c3491adc6e76d9ab5ffd7a90f092199da8687cbdfb3a210c473345ca9f6d7112e5c6f0b6e0ba1f78f37b2a57958bbe636ee4e14db06f918f31c
-
SSDEEP
12288:xy90DW32Zao4AiIgfg6kpD1y4MwgrW1pToUQXzwQ4y0ZU/PzQF/99:xyEUGVJgfgpowgrW1ZHQjwQZbI9
-
Executes dropped EXE
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-