General
-
Target
Asphalt_9_trainer_anti-ban.exe
-
Size
13.3MB
-
Sample
240615-teaw6azelp
-
MD5
dd06239af8013cae4cd6766341ee9bea
-
SHA1
b55b2dd34e8617ef7024f7c1e220d70026d8cfad
-
SHA256
a5644ed012227b53f62036c9f54c95eb7f8f9105c00c6fd3c230106c6eb38038
-
SHA512
33708026af1e2225ea012906e20450fc2d788678ab4a8c7e0290649a4a995e7c4375c30d79909b0fe92be8717f7105c817d02c226adffcf5e7c76f96862cead6
-
SSDEEP
393216:tEkcqY6q1+TtIiF0Y9Z8D8Ccl6lniEuPKSDuK+:tkD6q1QtILa8DZcIli8SCK+
Malware Config
Targets
-
-
Target
Asphalt_9_trainer_anti-ban.exe
-
Size
13.3MB
-
MD5
dd06239af8013cae4cd6766341ee9bea
-
SHA1
b55b2dd34e8617ef7024f7c1e220d70026d8cfad
-
SHA256
a5644ed012227b53f62036c9f54c95eb7f8f9105c00c6fd3c230106c6eb38038
-
SHA512
33708026af1e2225ea012906e20450fc2d788678ab4a8c7e0290649a4a995e7c4375c30d79909b0fe92be8717f7105c817d02c226adffcf5e7c76f96862cead6
-
SSDEEP
393216:tEkcqY6q1+TtIiF0Y9Z8D8Ccl6lniEuPKSDuK+:tkD6q1QtILa8DZcIli8SCK+
-
Drops startup file
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-