General
- Target Asphalt_9_trainer_anti-ban.exe
- Size 13.3MB
- Sample240615-teaw6azelp
- SHA256 a5644ed012227b53f62036c9f54c95eb7f8f9105c00c6fd3c230106c6eb38038
- MD5 dd06239af8013cae4cd6766341ee9bea
- SHA1 b55b2dd34e8617ef7024f7c1e220d70026d8cfad
- SHA512 33708026af1e2225ea012906e20450fc2d788678ab4a8c7e0290649a4a995e7c4375c30d79909b0fe92be8717f7105c817d02c226adffcf5e7c76f96862cead6
- SSDEEP 393216:tEkcqY6q1+TtIiF0Y9Z8D8Ccl6lniEuPKSDuK+:tkD6q1QtILa8DZcIli8SCK+
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Malware Config
Targets
-
- Target Asphalt_9_trainer_anti-ban.exe
- Size 13.3MB
- SHA256 a5644ed012227b53f62036c9f54c95eb7f8f9105c00c6fd3c230106c6eb38038
- MD5 dd06239af8013cae4cd6766341ee9bea
- SHA1 b55b2dd34e8617ef7024f7c1e220d70026d8cfad
- SHA512 33708026af1e2225ea012906e20450fc2d788678ab4a8c7e0290649a4a995e7c4375c30d79909b0fe92be8717f7105c817d02c226adffcf5e7c76f96862cead6
- SSDEEP 393216:tEkcqY6q1+TtIiF0Y9Z8D8Ccl6lniEuPKSDuK+:tkD6q1QtILa8DZcIli8SCK+
- MD5 SHA1 SHA512 SSDEEP
-
Drops startup file
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.