General
- Target 0x0006000000014144-164.dat
- Size 1.4MB
- Sample240301-svs71aha9v
- SHA256 be2fcb4b7d298fe37ba68742c2f3d0f147fb7c941555d62557acffe07d8d4b14
- MD5 d404e79a9f97898b0537290383e9fd5d
- SHA1 b605dc1893a3e686dbc42725f45ebd5656665361
- SHA512 83d1b1c0057f90fbf08cd8b1e0349f35172421254cc8c28fa6da810ed9f3a1cf125e80318b3fa356c305d4c5ef76ec37d936d1e5fa526dde12b81e07913dddaf
- SSDEEP 24576:Ampxr3MFixkWWI4KadYcVBFb1lpFHjndG/9iYTWBYSX6ZdpaTtI:3ptj8DX5j4HqWSX6ZdpStI
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
0x0006000000014144-164.exe
Resource
win7-20240221-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 0x0006000000014144-164.dat
- Size 1.4MB
- SHA256 be2fcb4b7d298fe37ba68742c2f3d0f147fb7c941555d62557acffe07d8d4b14
- MD5 d404e79a9f97898b0537290383e9fd5d
- SHA1 b605dc1893a3e686dbc42725f45ebd5656665361
- SHA512 83d1b1c0057f90fbf08cd8b1e0349f35172421254cc8c28fa6da810ed9f3a1cf125e80318b3fa356c305d4c5ef76ec37d936d1e5fa526dde12b81e07913dddaf
- SSDEEP 24576:Ampxr3MFixkWWI4KadYcVBFb1lpFHjndG/9iYTWBYSX6ZdpaTtI:3ptj8DX5j4HqWSX6ZdpStI
- MD5 SHA1 SHA512 SSDEEP
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Drops Chrome extension
Legitimate hosting services abused for malware hosting/C2
Looks up geolocation information via web service
Uses a legitimate geolocation service to find the infected system's geolocation info.