General
- Target SecuriteInfo.com.Win32.Evo-gen.7749.18660.exe
- Size 470KB
- Sample230926-jftesagg38
- SHA256 ab98deb5a294d33d663dc6c176afa4e398da7c58b11f25ed05a2f5e9e2e793a7
- MD5 66c6572c4e4bffc1b5f2fb9799de4912
- SHA1 280c02a8d2f662ad41102dcd02d151f4ec68cf42
- SHA512 e5001d619a7b223c30cf21bd1e62aadc315c283a102d5afb64827493c81d09a1327a72754a69cb456972b6a01aff9e8acc0c3ef9f53e07c62eeb5ac0f04eb8a0
- SSDEEP 12288:lY5MCypLAwJc3g3KW4ne3mrJxsnWWl1AcSY7Q:eUzJV3KW94/u1JS/
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Win32.Evo-gen.7749.18660.exe
Resource
win7-20230831-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target SecuriteInfo.com.Win32.Evo-gen.7749.18660.exe
- Size 470KB
- SHA256 ab98deb5a294d33d663dc6c176afa4e398da7c58b11f25ed05a2f5e9e2e793a7
- MD5 66c6572c4e4bffc1b5f2fb9799de4912
- SHA1 280c02a8d2f662ad41102dcd02d151f4ec68cf42
- SHA512 e5001d619a7b223c30cf21bd1e62aadc315c283a102d5afb64827493c81d09a1327a72754a69cb456972b6a01aff9e8acc0c3ef9f53e07c62eeb5ac0f04eb8a0
- SSDEEP 12288:lY5MCypLAwJc3g3KW4ne3mrJxsnWWl1AcSY7Q:eUzJV3KW94/u1JS/
- MD5 SHA1 SHA512 SSDEEP
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.