General
- Target ca3048f3c3dfc5345968cbfed67cf23d.exe
- Size 263KB
- Sample230726-s2hd3sec8s
- SHA256 180bb4e28a2faaf8faee1afd083ddfb01782420a1a72a6545a93ec5487b58c78
- MD5 ca3048f3c3dfc5345968cbfed67cf23d
- SHA1 ad65f42df846d04605db78e9d9d724539ee2ab2e
- SHA512 47633b518379304f0c7b8cd0f409d49dfdc762d4b138c6c7f955ffdeb75d8e9607d4e055ef5285b4b6cf4ab233ec1cb5af2b0e09dfc3080e1b28ba27402a5cc2
- SSDEEP 6144:Qgw3guF95PGwRd1VQUFOvH4t4RV96snA0:nwQu5h52UFOvH4tUem
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ca3048f3c3dfc5345968cbfed67cf23d.exe
Resource
win7-20230712-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target ca3048f3c3dfc5345968cbfed67cf23d.exe
- Size 263KB
- SHA256 180bb4e28a2faaf8faee1afd083ddfb01782420a1a72a6545a93ec5487b58c78
- MD5 ca3048f3c3dfc5345968cbfed67cf23d
- SHA1 ad65f42df846d04605db78e9d9d724539ee2ab2e
- SHA512 47633b518379304f0c7b8cd0f409d49dfdc762d4b138c6c7f955ffdeb75d8e9607d4e055ef5285b4b6cf4ab233ec1cb5af2b0e09dfc3080e1b28ba27402a5cc2
- SSDEEP 6144:Qgw3guF95PGwRd1VQUFOvH4t4RV96snA0:nwQu5h52UFOvH4tUem
- MD5 SHA1 SHA512 SSDEEP
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.