General
-
Target
f63c5fac0a445598af8a6e6c6a10baf626e40b033f2b40bb4ff0c23cf30189a0
-
Size
1.1MB
-
Sample
230426-rd4rqsbf7t
-
MD5
5226e7b42e28c2c840d75e06cef9ddab
-
SHA1
81afea6c5979fb43812d212e462db5b5cc0b4744
-
SHA256
f63c5fac0a445598af8a6e6c6a10baf626e40b033f2b40bb4ff0c23cf30189a0
-
SHA512
940d2f64d859686e657fef55504487630ee387d8933fb3bc97396f1ac09d5a43f90a4b1cccdf80e148696ca6c488dcf9a3566c0d798a04672e84db82aed5be04
-
SSDEEP
24576:KyzxZoPmC3qJY9jUX7VquuQAvVYfvyao5akq4w9:RzxKPqy9jyP1AdYZgakq4
Static task
static1
Malware Config
Targets
-
-
Target
f63c5fac0a445598af8a6e6c6a10baf626e40b033f2b40bb4ff0c23cf30189a0
-
Size
1.1MB
-
MD5
5226e7b42e28c2c840d75e06cef9ddab
-
SHA1
81afea6c5979fb43812d212e462db5b5cc0b4744
-
SHA256
f63c5fac0a445598af8a6e6c6a10baf626e40b033f2b40bb4ff0c23cf30189a0
-
SHA512
940d2f64d859686e657fef55504487630ee387d8933fb3bc97396f1ac09d5a43f90a4b1cccdf80e148696ca6c488dcf9a3566c0d798a04672e84db82aed5be04
-
SSDEEP
24576:KyzxZoPmC3qJY9jUX7VquuQAvVYfvyao5akq4w9:RzxKPqy9jyP1AdYZgakq4
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-