General
- Target g.exe
- Size 386KB
- Sample230930-2lhvcahc59
- SHA256 d1c7bae315ef64874ac2d709211ea2ef46030e368903da91373df42554f70384
- MD5 4413e6b96bb1b524585049dc2b7d5d08
- SHA1 35fdea08bd3dddc136d91792737c825c193d2d9f
- SHA512 97b86a546b05737f01031775a625c65a6ce6e078524564f4d1438bbaa26b7cc652a07f9cd6ba4d76f3562b8d2fcdb7cffe7dd2915dbce3aa15a89865327d491b
- SSDEEP 6144:nJNwgJ5Sy4AAV7jTmVZDzUTR/rfksUHP7Ti/hvtnXvwOeZu8QSXWNJSxaAT:nHwgOAs7jK6RbkB72JFnIjYHgWNS
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
g.exe
Resource
win7-20230831-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target g.exe
- Size 386KB
- SHA256 d1c7bae315ef64874ac2d709211ea2ef46030e368903da91373df42554f70384
- MD5 4413e6b96bb1b524585049dc2b7d5d08
- SHA1 35fdea08bd3dddc136d91792737c825c193d2d9f
- SHA512 97b86a546b05737f01031775a625c65a6ce6e078524564f4d1438bbaa26b7cc652a07f9cd6ba4d76f3562b8d2fcdb7cffe7dd2915dbce3aa15a89865327d491b
- SSDEEP 6144:nJNwgJ5Sy4AAV7jTmVZDzUTR/rfksUHP7Ti/hvtnXvwOeZu8QSXWNJSxaAT:nHwgOAs7jK6RbkB72JFnIjYHgWNS
- MD5 SHA1 SHA512 SSDEEP
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.