General
-
Target
b4c197aa74ab1aa8eb19e9f750643983
-
Size
844KB
-
Sample
240305-p8xkssfd4y
-
MD5
b4c197aa74ab1aa8eb19e9f750643983
-
SHA1
fe4319509145df64949c4cd9d18185a9a04e8633
-
SHA256
fb36313cba2e5e967fa201a8317176af31782119fc5d6b022c1c68c5996da8ee
-
SHA512
a7cbe83a1b9f10595cfd8f542078e8230a9576935e9caa341f824fcc18bfd3eb6f2bedcb52683f88de6dcc7fc5573a72cbb4c1c9440c1cfede37c43b2f3a6fa3
-
SSDEEP
12288:DmgwBRrWBuAYXe4/DJHXdziAreAjIETFrcfEOnR4nCSEmZh012EH5K9gJy5aAWdY:DmgwHW0AYvVXdzGETFI39J1q
Static task
static1
Behavioral task
behavioral1
Sample
b4c197aa74ab1aa8eb19e9f750643983.exe
Resource
win7-20240221-en
Malware Config
Targets
-
-
Target
b4c197aa74ab1aa8eb19e9f750643983
-
Size
844KB
-
MD5
b4c197aa74ab1aa8eb19e9f750643983
-
SHA1
fe4319509145df64949c4cd9d18185a9a04e8633
-
SHA256
fb36313cba2e5e967fa201a8317176af31782119fc5d6b022c1c68c5996da8ee
-
SHA512
a7cbe83a1b9f10595cfd8f542078e8230a9576935e9caa341f824fcc18bfd3eb6f2bedcb52683f88de6dcc7fc5573a72cbb4c1c9440c1cfede37c43b2f3a6fa3
-
SSDEEP
12288:DmgwBRrWBuAYXe4/DJHXdziAreAjIETFrcfEOnR4nCSEmZh012EH5K9gJy5aAWdY:DmgwHW0AYvVXdzGETFI39J1q
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-