1c8ce4be76fb39f78c1b4102e0438748bbab8fe8ae5fae711c4171de99d418a9

Sharing

Copy URL Twitter E-mail

General

Target
Wallet 0.3.zip
Size 121.0MB
Sample260625-glgxtsht91
SHA256 1c8ce4be76fb39f78c1b4102e0438748bbab8fe8ae5fae711c4171de99d418a9
MD5 9b538e6928de3a2a73dccab7ad49f3e3
SHA1 d6fb8ea61f91d87d0d1bdcfa4c1a74193040c10e
SHA512 6a2b76ae8acd622aaac05cc25de744b39002535d05dd217a51437435cd5ae92334d2e57aa765b535d5574a835b28cb00d8b7873e0aa79c3c66cc61d4b898a26a
SSDEEP 3145728:Rg77vb5QR3xXwE24Z5rMMcQpLzDlGnn01BrWl0MifaxcA:mGVZeMxxvlGn01FWqMifEcA
TLSH
T17558336959A156D4FA0B2156BFB78E0063D33CE671A6803D3B6B9035780B2F78C77E90
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Wallet 0.3/Linux OS/audit
- Size 14.7MB
- SHA256 4d6423408d7668105e071bd5aa906db631d37c823d0067c56121128d5f395412
- MD5 2bd284057dcd7b0c32c93d3c783d67a9
- SHA1 0b9fb4d9dee3e2d4c611b79e7582f9f8d56c3f27
- SHA512 6c50fd82976d3e59124fccc600e016204c0de76182749be701cc092b4c1dcef1de5cb005b54e3dea90dffd3f0c3997ea8a6726e29b6fd3adf33fc7c15076e7ea
- SSDEEP 393216:FDnNXKtvhZbBUBjiNHmAbuMzdeN/dSL7KIkWU2cLi1YL4N2kgUqyrV0:FDNXKtvzKBqbuvBdG7K52c+1o9+V0
- TLSH
  T126F6336756B219E8F9C3117E9EBBC926E68338A01113153E34AA902478DB7F53D33F94
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Wallet 0.3/Linux OS/balances
- Size 8.9MB
- SHA256 012a042c9a9c9bba968216a3610da545de0f484d0b018299c6447109704dafad
- MD5 474371670c5b038d9758fb083479f809
- SHA1 fd01decc66f7c0c3b5946badee3897d7475905ae
- SHA512 8d5fdbe4e9d755c4882beb087f35ff12db574fc21eb431af3baadee7b2575b91131efb2e02d699f7692cfc595af8856d25993d2cf919e17c7500be8a29fa98ef
- SSDEEP 196608:n+tBjiNHm6fbu7sn7/daJB5i0dwIIFpwohYyiQehlLBUsdr96R:nUBjiNHmAbuo7/dSLrKIQt4RBfrI
- TLSH
  T1AA96337693B248F4FA1342B1BEFB992197A278D11113653A3952D23428DBBF03DA7F44
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Wallet 0.3/Linux OS/benchmark
- Size 8.9MB
- SHA256 9dd5c06d0916b310a286db517f1b64480eef0c923d1251720e3df67cbdde49f2
- MD5 019cda3130e812a35751bbe8a79cebf2
- SHA1 1dd6908819e6ffbeb33f6d41056a6edb0f47bd1b
- SHA512 096112c2aec5e94b4751372b9f2b80dca99d19c2234f5a7f7c830f996a2d52a5746bf76df5fe0aaa87852f861b4ba94f31f852c884683f7023c9c85aa4872cb0
- SSDEEP 196608:Z+tBjiNHm6fbu7sn7/daJB5i0dwIIFpwohYz92Jrqsdr9VR:ZUBjiNHmAbuo7/dSLrKIQU96rFrP
- TLSH
  T1A796333693A249F4EA024275BEFF9922A76238D12113553B3552C23028DF7F17DABF85
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Wallet 0.3/Linux OS/miner
- Size 14.7MB
- SHA256 3b75ce6a379a54fa290c213b71e92efabb110258fc5c2be85fa9f134ee554322
- MD5 af327cb3e44fa390f788f08fcc2835ff
- SHA1 9d34fb0b6006322a3a612c5ba64acf07d8e5ea50
- SHA512 37a2e9caff1b47d6f4d97a8d10729b493ce75e0b325316b7be26430c1a75588a6d706563d331b800dd7c468b699ba3acd066d905e55c5ac59754388ec9ea02b0
- SSDEEP 393216:ADnNXKtvhZbBUBjiNHmAbuMzdeN/dSL7KIkRBiLi1IL4NLkgUqyrV0:ADNXKtvzKBqbuvBdG7KRBi+1Yo+V0
- TLSH
  T133F633B7967219E4F9C3117E9FFBD92AD64238A40013153F38AA90242C9B7E53D37E94
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral7 behavioral8
- Target
  Wallet 0.3/Linux OS/wallet
- Size 26.6MB
- SHA256 014192b7be8a48d3a6df12355a5f76c9977ae004898fbd29dce16f999fd92361
- MD5 ff08abd69c41b0e627e89f2afff260e2
- SHA1 09016986e0695fa4d5827b02ae6f52a176ff2f6b
- SHA512 bd8aa9c69672535d18cb91c23b2294890546800e2e5fedaed0b3407df29a219652091f813bc840071770c415e6ce11c6012c341081a59b69b2afe82ce6861e5d
- SSDEEP 786432:HxiNXKtvz61Bqbu7xRdG75FpBLGtV+MMfMlfJ6R+1o9OK0:Rr61BagdGzLNMMfMZJwP
- TLSH
  T11357332FBAE15294F986057FBEB9C6255383B8F20213162BD549E42424CBBE43D37F58
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Wallet 0.3/Windows Операционная Система/audit.exe
- Size 10.6MB
- SHA256 30b22309f9528a578e0273308ce380def9a243da632bcc26847c9c84644cb7c0
- MD5 948c824bbbcda76c6f996d91f10f9339
- SHA1 77dac311a5e249065f4f644e3b6730f7b89b7b2a
- SHA512 73a35ecec922e588bdfc5584b62d7cc904fdefe24b12b607a428e809a884d82593afa725dc002f13df33f993fb5dbda0a97f3ae6313c2b9884a779f3a3e46c9b
- SSDEEP 196608:paQa3LA1HeT39Iigw6QeE9TFa0Z8DOjCdylhB66SrQKkylyJzuxaqIhUN6uft:MQaU1+TtIiF0Y9Z8D8CclLfTK/MlOaql
- TLSH
  T18CB63359B1A106EEE9F72135C2A6C561FAB27CA34731C6CF27E816323F171E1493A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral11 behavioral12
- Target
  Wallet 0.3/Windows Операционная Система/balances.exe
- Size 6.9MB
- SHA256 78681a9ca097d30d7f4253c5ba9435bb714253625b437fdf35a40af21bbfef70
- MD5 cea60dde68c847125b774489490a938f
- SHA1 1352750b76f93ea43abd6cb90f59d88f785b3d59
- SHA512 575c180849a698323e1509925535e0e2703fd6ee49a981abb2ae45587dbd1c1c0e91ce6cfb9177304eec6da0345b3608876fded22540723548dafc022e14718e
- SSDEEP 196608:3BwEA1HeT39IigFeE9TFa0Z8DOjCdyln6jQV3eFS:RM1+TtIiRY9Z8D8Ccl6sOS
- TLSH
  T1E4763319A2E505E9F9B36538C693C961EBB27CA24771C7CF23E816223F132F64935721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Loads dropped DLL
behavioral13 behavioral14
- Target
  Wallet 0.3/Windows Операционная Система/benchmark.exe
- Size 6.9MB
- SHA256 c4d92b889bf1def31703baeb04aa6d2f0c7bb009cc465fbab7ed1e5196f76615
- MD5 30c3620d5293fbe3f22cfb7378a93969
- SHA1 9434ccc81faaccd2bc5f745ae852a8bba3f23b5e
- SHA512 fadfbcf8078c1a2f8631ff4f2129e6991ee5dda59fca3e37e7912eefae2ce0f7f02a609669e22f40b0361a9edeb3dd0307789ce32d9531a2089ef8c41c496716
- SSDEEP 196608:x0xCC9A1HeT39IigFeE9TFa0Z8DOjCdyl0kQV3eiS:/CW1+TtIiRY9Z8D8Ccl0n3S
- TLSH
  T10676335572E505E9E9B75138C2E2C961FBB2B8A20731C7CF23E816663F232F64935721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Loads dropped DLL
behavioral15 behavioral16
- Target
  Wallet 0.3/Windows Операционная Система/miner.exe
- Size 10.6MB
- SHA256 7a619217a6661b1b6839e3576d0dc12333da86196887503c3438b4d2da82b3f0
- MD5 d5335d08154d5a30d451ec49c98125b7
- SHA1 edf52cde80b10d16a5b4938d15e27277fdebf5eb
- SHA512 bc06428b97d8b860ae14ecbbf01cea9eabaa513fd55d5b9211310bb3a1aa1f46b9ac73221ddad96e732d205247349e93bb6732ab36e7437ac20ca1c5638a7a47
- SSDEEP 196608:gzvSSLA1HeT39Iigw6QeE9TFa0Z8DOjCdyl+B66SmQKkylyJXuxaqIhUN6ux:cv21+TtIiF0Y9Z8D8CclefeK/MpOaqIC
- TLSH
  T1C2B6335971A006EDE9FB2534C2E6C561FAB27CA28731C6CF17F816223F171E2493A761
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Loads dropped DLL
behavioral17 behavioral18
- Target
  Wallet 0.3/Windows Операционная Система/wallet.exe
- Size 13.5MB
- SHA256 0a30c5023182d215301eefdcc37bd142fbc3fa54c9593941c67cc7ba18d1448c
- MD5 d9690f251c264703a4ae809423b4c28b
- SHA1 839ef9091461b446ed7076d2e9696799edbbc3e8
- SHA512 34ea84eefbf470385fe7993010036f12a0e5ba617930ff5a58d4c00cdaad2bbf186c17e7a5c6fad4e9223c3047c03623c7b0f45261caf0f4fde2f7e90b20937f
- SSDEEP 393216:HpW8PW8W1+TtIiF0Y9Z8D8CclThB8fTK/MlOaqISNo1:JW8PW8W1QtILa8DZcN8uVaqzNo
- TLSH
  T125E63388729405DCF9AE323586D5C662ABF278A247B4C2DF2BF80D211F631D5EE36351
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Loads dropped DLL
behavioral19 behavioral20

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Loads dropped DLL

Enumerates connected drives

Loads dropped DLL

Loads dropped DLL

Loads dropped DLL

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20