Overview

overview

7

Static

static

3

Mont3an Wa...er.exe

windows10-1703-x64

7

Resubmissions

Sharing

Copy URL Twitter E-mail

General

  • Target

    Mont3an Wallet Cracker.exe

  • Size

    67.8MB

  • Sample

    240523-z34r2agh63

  • MD5

    e7b9abda024719e7886a0935edbd678b

  • SHA1

    d83b822ca5b8aab027034aae820ecb05eb54d9af

  • SHA256

    c3be7933b9d7d69f44e345c3b19e8a2da8d0fe3795f83674dea9a5ab862b7648

  • SHA512

    c86af2692b4f6c303367588f0615ded9969743f6a5cc22b8ccf6b496073a387ea5370a18e61926506da20e537bc0e62300dd45fc8b9727d32b4c578c56c4d12b

  • SSDEEP

    98304:aj1ZAxOCU3yUetDvB6ti3FOU8jRdqY9d2omTt20+NLDt2CB:2AxOCU3yUetDvB6ti1aOTtlcLpX

Score
7/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      Mont3an Wallet Cracker.exe

    • Size

      67.8MB

    • MD5

      e7b9abda024719e7886a0935edbd678b

    • SHA1

      d83b822ca5b8aab027034aae820ecb05eb54d9af

    • SHA256

      c3be7933b9d7d69f44e345c3b19e8a2da8d0fe3795f83674dea9a5ab862b7648

    • SHA512

      c86af2692b4f6c303367588f0615ded9969743f6a5cc22b8ccf6b496073a387ea5370a18e61926506da20e537bc0e62300dd45fc8b9727d32b4c578c56c4d12b

    • SSDEEP

      98304:aj1ZAxOCU3yUetDvB6ti3FOU8jRdqY9d2omTt20+NLDt2CB:2AxOCU3yUetDvB6ti1aOTtlcLpX

    Score
    7/10
    evasionpersistencetrojan

    • .NET Reactor proctector

      Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks