General
-
Target
loader.exe
-
Size
6.0MB
-
Sample
241215-ak3dtazqbl
-
MD5
36d48974603c511748cfff0b32b29f17
-
SHA1
d91e9e1d4a1ab8491467d1d6eb6aadb38c47cbe7
-
SHA256
af1d2d94f42a3123c29c9eab1530375da3561d7dc08d0a7e874a9cfea573c4e9
-
SHA512
45e9219bbbe1db3347d0a5a8c3c5dbf0977c24b37408d4a900bb02a8a940aa147017d8964a866b6873c302a166b332adc03ca5cddfb4f0abf3d90794b6c3935f
-
SSDEEP
98304:8PEtdFBBV9amaHl3Ne4i3gmtfXJOLhx9fZAzDJ4wzQgsRuGK4RKPM0E3OmMW7Ty:8+FjVYeN/FJMIDJf0gsAGK4RKk0dW7Ty
Behavioral task
behavioral1
Sample
loader.exe
Resource
win7-20240903-en
Malware Config
Targets
-
-
Target
loader.exe
-
Size
6.0MB
-
MD5
36d48974603c511748cfff0b32b29f17
-
SHA1
d91e9e1d4a1ab8491467d1d6eb6aadb38c47cbe7
-
SHA256
af1d2d94f42a3123c29c9eab1530375da3561d7dc08d0a7e874a9cfea573c4e9
-
SHA512
45e9219bbbe1db3347d0a5a8c3c5dbf0977c24b37408d4a900bb02a8a940aa147017d8964a866b6873c302a166b332adc03ca5cddfb4f0abf3d90794b6c3935f
-
SSDEEP
98304:8PEtdFBBV9amaHl3Ne4i3gmtfXJOLhx9fZAzDJ4wzQgsRuGK4RKPM0E3OmMW7Ty:8+FjVYeN/FJMIDJf0gsAGK4RKk0dW7Ty
-
Executes dropped EXE
-
Loads dropped DLL
-
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Enumerates processes with tasklist
-