General
-
Target
619d0fc73ae0e23908f636dc5ec0a22ef2ee5aa762cb71e4b00953677c604c18
-
Size
696KB
-
Sample
230426-k6w42agd47
-
MD5
d43b780ce9f569f3b3b09ce6385dd8ae
-
SHA1
d1ad0f85a232ce3967323acbb301b41e8faac256
-
SHA256
619d0fc73ae0e23908f636dc5ec0a22ef2ee5aa762cb71e4b00953677c604c18
-
SHA512
911f1e18aecb81b1622bdd4bb1fae98f2b1a625a43b340aadbf297110206625cd29b009ab1cf8386ac82470e3206a7a336aba917d01a240d2f7d2263eda850e7
-
SSDEEP
12288:my90kbIAROBnJp4et5u7+TFYHmefmwuT5vOzPo04kwW0qfrLp6/mb1:myfIARanJp4x7+6HLmwg5Dcr96i1
Static task
static1
Malware Config
Targets
-
-
Target
619d0fc73ae0e23908f636dc5ec0a22ef2ee5aa762cb71e4b00953677c604c18
-
Size
696KB
-
MD5
d43b780ce9f569f3b3b09ce6385dd8ae
-
SHA1
d1ad0f85a232ce3967323acbb301b41e8faac256
-
SHA256
619d0fc73ae0e23908f636dc5ec0a22ef2ee5aa762cb71e4b00953677c604c18
-
SHA512
911f1e18aecb81b1622bdd4bb1fae98f2b1a625a43b340aadbf297110206625cd29b009ab1cf8386ac82470e3206a7a336aba917d01a240d2f7d2263eda850e7
-
SSDEEP
12288:my90kbIAROBnJp4et5u7+TFYHmefmwuT5vOzPo04kwW0qfrLp6/mb1:myfIARanJp4x7+6HLmwg5Dcr96i1
-
Executes dropped EXE
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-