General
-
Target
ec8e63103dbd25e27239eafb0c5e218c5da2d8e464792bb5100309a2812de355
-
Size
697KB
-
Sample
230426-vlv2cace6t
-
MD5
6efc55934592cb8a85fa3a83f993e28b
-
SHA1
6cee545cc11d14da88aefae0cde0ad44eaee2940
-
SHA256
ec8e63103dbd25e27239eafb0c5e218c5da2d8e464792bb5100309a2812de355
-
SHA512
d21b01eb3020aae0fed567e1845ab88c521b54c8ed6df7823cb32198710f076605a7cf95958191e0c003f89e07a08e1249c560cf29490fe20f033410f4764a9f
-
SSDEEP
12288:ty90fnQ4MUmOE9EQxywvAj9ujjNNCaW3EwXldSVhhYWj57vlzO:ty/4xc9EQxyLYjBmZXlQnnfzO
Static task
static1
Malware Config
Targets
-
-
Target
ec8e63103dbd25e27239eafb0c5e218c5da2d8e464792bb5100309a2812de355
-
Size
697KB
-
MD5
6efc55934592cb8a85fa3a83f993e28b
-
SHA1
6cee545cc11d14da88aefae0cde0ad44eaee2940
-
SHA256
ec8e63103dbd25e27239eafb0c5e218c5da2d8e464792bb5100309a2812de355
-
SHA512
d21b01eb3020aae0fed567e1845ab88c521b54c8ed6df7823cb32198710f076605a7cf95958191e0c003f89e07a08e1249c560cf29490fe20f033410f4764a9f
-
SSDEEP
12288:ty90fnQ4MUmOE9EQxywvAj9ujjNNCaW3EwXldSVhhYWj57vlzO:ty/4xc9EQxyLYjBmZXlQnnfzO
-
Executes dropped EXE
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-