General
-
Target
890fb5416a4320c136a40440a32081b8d31b440250fefc3a8185ccd6005b9700.exe
-
Size
571KB
-
Sample
240524-qhqv1afd78
-
MD5
fba7a7675a7db49f2e2d06c74912a706
-
SHA1
65a3f37e4db1b4b4831a69f326041749c823e948
-
SHA256
890fb5416a4320c136a40440a32081b8d31b440250fefc3a8185ccd6005b9700
-
SHA512
9943a94d0f5ff63d01ea952bd6a196dc30ad4d719d1757ad444db52534526902abf90b5df9b1e58acdc3f5fb4a2f11e4df2c37bf380fc50b17be96b294c39411
-
SSDEEP
12288:pqCoQ0GNl9Rq02xC6mV5SmXfJuJ191hyNySM:3RRd2xC6mVoewhoyv
Static task
static1
Behavioral task
behavioral1
Sample
890fb5416a4320c136a40440a32081b8d31b440250fefc3a8185ccd6005b9700.exe
Resource
win7-20240508-en
Malware Config
Targets
-
-
Target
890fb5416a4320c136a40440a32081b8d31b440250fefc3a8185ccd6005b9700.exe
-
Size
571KB
-
MD5
fba7a7675a7db49f2e2d06c74912a706
-
SHA1
65a3f37e4db1b4b4831a69f326041749c823e948
-
SHA256
890fb5416a4320c136a40440a32081b8d31b440250fefc3a8185ccd6005b9700
-
SHA512
9943a94d0f5ff63d01ea952bd6a196dc30ad4d719d1757ad444db52534526902abf90b5df9b1e58acdc3f5fb4a2f11e4df2c37bf380fc50b17be96b294c39411
-
SSDEEP
12288:pqCoQ0GNl9Rq02xC6mV5SmXfJuJ191hyNySM:3RRd2xC6mVoewhoyv
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of SetThreadContext
-