General
-
Target
Fight To The Death.exe
-
Size
13.0MB
-
Sample
240314-1bxebafg2y
-
MD5
a19cf172e3828f190e416be5ad28415f
-
SHA1
9f7232e5bf4dcc64348dce04be0db137cda306d4
-
SHA256
f6787d31ffd66853f1c15c4b7de175a76e02b6fe36523ebf97e3622cf3111dc7
-
SHA512
024ddde4ba83bccfb142feadda18db16025c57830ce8637f5682f9d896621a3a354e2287546f717c71bf00c6faa64edca8b480a41687c8c37dff67c7ab0c80d2
-
SSDEEP
393216:Wu7L/povKmr2pu0tTtdQuslSl9DoWOv+9fqX8hXd:WCLRoKmr2puI5dQu9xorvSiMhX
Behavioral task
behavioral1
Sample
Fight To The Death.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Fight To The Death.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
creal.pyc
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
creal.pyc
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
Fight To The Death.exe
-
Size
13.0MB
-
MD5
a19cf172e3828f190e416be5ad28415f
-
SHA1
9f7232e5bf4dcc64348dce04be0db137cda306d4
-
SHA256
f6787d31ffd66853f1c15c4b7de175a76e02b6fe36523ebf97e3622cf3111dc7
-
SHA512
024ddde4ba83bccfb142feadda18db16025c57830ce8637f5682f9d896621a3a354e2287546f717c71bf00c6faa64edca8b480a41687c8c37dff67c7ab0c80d2
-
SSDEEP
393216:Wu7L/povKmr2pu0tTtdQuslSl9DoWOv+9fqX8hXd:WCLRoKmr2puI5dQu9xorvSiMhX
-
Drops startup file
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Legitimate hosting services abused for malware hosting/C2
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
-
-
Target
creal.pyc
-
Size
32KB
-
MD5
686377a51e2d22fc749548894f57830e
-
SHA1
6c182815705ce635827e3c61a475743c8bb255c0
-
SHA256
e22abb31b07bf5fc19806087f3c921738fba5a9ce7c0ec190f83e5f3d77bfd79
-
SHA512
5710d83f8715d6e262e9352e8e8d25b719f01481c56a5017940936d7c5040cb05a5d73b7f56d849abb3164bf840317d6e5908742eeed601ac3a82788bf5fca85
-
SSDEEP
768:L8DnrjC2VsfNEiyAuAfKFMrRtfqtvEwS7bnjerAroaHjsIAvN8YC06X:IjrjQe3aKFcfDwS7fuPviYD6X
Score3/10 -