General
-
Target
pawufefu.msi_
-
Size
496KB
-
Sample
231029-y3bwkshb7y
-
MD5
af64b568501ce3d7e43ace3dca1183e2
-
SHA1
88d52d7ebe72415d1ee1ff16ffe8afda0b052df0
-
SHA256
bff478766c3a3962228a15fcaae1fbf8c31ec337a83496c4670cd3e704ead735
-
SHA512
b949b3cb7c80c38c38493b20c8e96e40343f79e265a5a1f73ecc9f1f34966e13079dcfc7b554ef67de5ab4e00f45b1dda5802f90084f5a64de8431d2d8f0943d
-
SSDEEP
12288:2sUSmjkJmRAp8QbNeSAt8wCz7JIXybzHI+c0zVH:nekURQzbNeSug3JIXybzxh
Static task
static1
Behavioral task
behavioral1
Sample
pawufefu.msi
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
pawufefu.msi
Resource
android-x64-20231023.1-en
Malware Config
Extracted
C:\$Recycle.Bin\S-1-5-21-1154728922-3261336865-3456416385-1000\DECRYPT-FILES.txt
maze
http://aoacugmutagkwctu.onion/6c210cb7c0df7a38
https://mazedecrypt.top/6c210cb7c0df7a38
Targets
-
-
Target
pawufefu.msi_
-
Size
496KB
-
MD5
af64b568501ce3d7e43ace3dca1183e2
-
SHA1
88d52d7ebe72415d1ee1ff16ffe8afda0b052df0
-
SHA256
bff478766c3a3962228a15fcaae1fbf8c31ec337a83496c4670cd3e704ead735
-
SHA512
b949b3cb7c80c38c38493b20c8e96e40343f79e265a5a1f73ecc9f1f34966e13079dcfc7b554ef67de5ab4e00f45b1dda5802f90084f5a64de8431d2d8f0943d
-
SSDEEP
12288:2sUSmjkJmRAp8QbNeSAt8wCz7JIXybzHI+c0zVH:nekURQzbNeSug3JIXybzxh
Score10/10-
Drops startup file
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Sets desktop wallpaper using registry
-