General
-
Target
SecuriteInfo.com.Win32.PWSX-gen.31328.3622.exe
-
Size
207KB
-
Sample
231031-p5r6xagb5t
-
MD5
da7445c8881a286bbb427fa5854f8e79
-
SHA1
bbe113b28ce76adbed21fb018848aba8a574fbca
-
SHA256
a217dee30587e692a690bb7dbb8a43c77deb9dcff2522930c0b0f40d76f168b1
-
SHA512
93988d30b627a1d7e7143ef2278a0160d04a8e003813c9089c3dd228bc577fa25b3ebf71b59f607e2cd6f4d8d7e9db0708e9775c036393d5112dd44d85248125
-
SSDEEP
3072:pGT2UBSmePZRsM6QyGFbGf2WXWgAiBONUc:q2UBSdPZRsvG2X8
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Win32.PWSX-gen.31328.3622.exe
Resource
win7-20231023-en
Malware Config
Targets
-
-
Target
SecuriteInfo.com.Win32.PWSX-gen.31328.3622.exe
-
Size
207KB
-
MD5
da7445c8881a286bbb427fa5854f8e79
-
SHA1
bbe113b28ce76adbed21fb018848aba8a574fbca
-
SHA256
a217dee30587e692a690bb7dbb8a43c77deb9dcff2522930c0b0f40d76f168b1
-
SHA512
93988d30b627a1d7e7143ef2278a0160d04a8e003813c9089c3dd228bc577fa25b3ebf71b59f607e2cd6f4d8d7e9db0708e9775c036393d5112dd44d85248125
-
SSDEEP
3072:pGT2UBSmePZRsM6QyGFbGf2WXWgAiBONUc:q2UBSdPZRsvG2X8
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-