General
-
Target
893d2d1a7547f896400ebcb5937d3815722e0655418fd4b99f7ab2201aea1f24
-
Size
697KB
-
Sample
230426-j2rhbaga46
-
MD5
7e0f57d7f1a75288c62eae160fbffc3b
-
SHA1
8bb2b2d6019743a2fc155653d4fe5ef00e11643e
-
SHA256
893d2d1a7547f896400ebcb5937d3815722e0655418fd4b99f7ab2201aea1f24
-
SHA512
8d83df4b2f3803ba4ff7790a5ad301f7307f710e3fd8df48f8040c26c3e4bca2aa382e2ff56883bfaefef87f342fb7dc788c2cb24c3937da8179844add06f727
-
SSDEEP
12288:Ry90tdXgmjx9IuqssNHeCLQRAefxNex7BH5KIQyr8TgjnlABsz5ORhG:RybuqsssQQ28kBZKIQk8TgjlJ4m
Static task
static1
Malware Config
Targets
-
-
Target
893d2d1a7547f896400ebcb5937d3815722e0655418fd4b99f7ab2201aea1f24
-
Size
697KB
-
MD5
7e0f57d7f1a75288c62eae160fbffc3b
-
SHA1
8bb2b2d6019743a2fc155653d4fe5ef00e11643e
-
SHA256
893d2d1a7547f896400ebcb5937d3815722e0655418fd4b99f7ab2201aea1f24
-
SHA512
8d83df4b2f3803ba4ff7790a5ad301f7307f710e3fd8df48f8040c26c3e4bca2aa382e2ff56883bfaefef87f342fb7dc788c2cb24c3937da8179844add06f727
-
SSDEEP
12288:Ry90tdXgmjx9IuqssNHeCLQRAefxNex7BH5KIQyr8TgjnlABsz5ORhG:RybuqsssQQ28kBZKIQk8TgjlJ4m
-
Executes dropped EXE
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-