General
-
Target
a420cc943387fa5304f18717d3137ef842e2fb09c0c6eb1845da8b6bd26e33bf
-
Size
211KB
-
Sample
240522-x7y18sdf9x
-
MD5
8477f0b912fa1ea77e348a0de810308d
-
SHA1
27880f8d587c099933dfc2ab8fa8edaf74a6b6c1
-
SHA256
a420cc943387fa5304f18717d3137ef842e2fb09c0c6eb1845da8b6bd26e33bf
-
SHA512
48d2ed7143fe313c3027e22823cba48f5044d8d8b508ac182f697d0dfecbe2b942b6192a3e23926f28c03d92a87d9908246086f2e8788a31d32da82fd1de6424
-
SSDEEP
6144:sTrncFTr1S6x8qLk6b0vZccu+keWivx1M:sTjcVM88ru0vuP
Static task
static1
Behavioral task
behavioral1
Sample
a420cc943387fa5304f18717d3137ef842e2fb09c0c6eb1845da8b6bd26e33bf.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
stealc
default11
http://185.172.128.170
-
url_path
/7043a0c6a68d9c65.php
Targets
-
-
Target
a420cc943387fa5304f18717d3137ef842e2fb09c0c6eb1845da8b6bd26e33bf
-
Size
211KB
-
MD5
8477f0b912fa1ea77e348a0de810308d
-
SHA1
27880f8d587c099933dfc2ab8fa8edaf74a6b6c1
-
SHA256
a420cc943387fa5304f18717d3137ef842e2fb09c0c6eb1845da8b6bd26e33bf
-
SHA512
48d2ed7143fe313c3027e22823cba48f5044d8d8b508ac182f697d0dfecbe2b942b6192a3e23926f28c03d92a87d9908246086f2e8788a31d32da82fd1de6424
-
SSDEEP
6144:sTrncFTr1S6x8qLk6b0vZccu+keWivx1M:sTjcVM88ru0vuP
-
Downloads MZ/PE file
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-