General
- Target VoidG_013d128c.exe
- Size 9.5MB
- Sample260812-d9dcrshr3v
- SHA256 6ea7436d958ca1c9b2037366b6e40ac362f4f771f7fc368031ab8851b7b18c25
- MD5 cfa4a46e61ba51fd0e5297517c2c59a8
- SHA1 c823737d841096e45f83ef8ee225302a950bde82
- SHA512 3ed7ec02640e2fb0f8685c6ead5faf8e9312a1a1c357c5428ee0d96cdd44a32a9badaebba7a93388b7ffc19db3a9d2d5bb775f8d57a0e017fe63c89fa305506f
- SSDEEP 98304:nkJJPu6KZ6o1sw5H4BftoasojQcx91XyO6Yujw+Bm:nkJRc6isw5H4BftoasojQcx91XH6b0P
- TLSH T1DFA68C56E37800E8D4AAC2B9C7465153D771744A03B0ABDF1A90AEA12F37AE51F3F712
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
VoidG_013d128c.exe
Resource
win10v2004-20260513-en
8 signatures
300 seconds
Malware Config
Targets
-
- Target VoidG_013d128c.exe
- Size 9.5MB
- SHA256 6ea7436d958ca1c9b2037366b6e40ac362f4f771f7fc368031ab8851b7b18c25
- MD5 cfa4a46e61ba51fd0e5297517c2c59a8
- SHA1 c823737d841096e45f83ef8ee225302a950bde82
- SHA512 3ed7ec02640e2fb0f8685c6ead5faf8e9312a1a1c357c5428ee0d96cdd44a32a9badaebba7a93388b7ffc19db3a9d2d5bb775f8d57a0e017fe63c89fa305506f
- SSDEEP 98304:nkJJPu6KZ6o1sw5H4BftoasojQcx91XyO6Yujw+Bm:nkJRc6isw5H4BftoasojQcx91XH6b0P
- TLSH T1DFA68C56E37800E8D4AAC2B9C7465153D771744A03B0ABDF1A90AEA12F37AE51F3F712
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks for any installed AV software in registry
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
2Credentials In Files
1Credentials in Registry
1