Analysis
-
max time kernel
46s -
max time network
51s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
-
submitted
17-07-2023 20:19
General
-
Target
posdkgpf.exe
-
Size
50KB
-
MD5
9ede0f4c110e8a6cf414a61b2f2c0638
-
SHA1
1a68f4b8efadbef45cd8458bf6a1bd3fae88e211
-
SHA256
a121408015206dfc63e67224b6eb942148ac32503cb38dcd72aa1f92dd1c28f9
-
SHA512
e608aed85802ef43c251d40b825cf69305d132f9727e97bf2cfd30c842d0b1ad005ebbd3a89f7e0f3bae7eca8bd6232960cf4d0c7a14d4161479f4999a561578
-
SSDEEP
768:TVcCo1dt4cybqx7P9vm9Rg6+E7apmW8msk:T2t4cybq56O84
Score
6/10
Malware Config
Signatures
-
Accesses cryptocurrency files/wallets, possible credential harvesting 2 TTPs
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
Processes
-
C:\Users\Admin\AppData\Local\Temp\posdkgpf.exe"C:\Users\Admin\AppData\Local\Temp\posdkgpf.exe"1⤵