General
- Target 7f3fb65cfe033507b34f16b379fd1525.exe
- Size 120KB
- Sample210923-p6ebfaeed2
- SHA256 cd3a5dfcef8038b02442c0875583b1bbe5b9ed15721bb47c4615728f46b9a91d
- MD5 7f3fb65cfe033507b34f16b379fd1525
- SHA1 04624ee94dd4ffa2b0a9d9452ed6fc348d070d59
- SHA512 2945870ace3c24dd8db74b6b025616edfe514606820e93398c5c07e7ad66aa1c90c391b71900daf0a64f84ace0f42cec3072f67bbe8bd81545fcdd665daa2327
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
7f3fb65cfe033507b34f16b379fd1525.exe
Resource
win7v20210408
0 signatures
0 seconds
Malware Config
Targets
-
- Target 7f3fb65cfe033507b34f16b379fd1525.exe
- Size 120KB
- SHA256 cd3a5dfcef8038b02442c0875583b1bbe5b9ed15721bb47c4615728f46b9a91d
- MD5 7f3fb65cfe033507b34f16b379fd1525
- SHA1 04624ee94dd4ffa2b0a9d9452ed6fc348d070d59
- SHA512 2945870ace3c24dd8db74b6b025616edfe514606820e93398c5c07e7ad66aa1c90c391b71900daf0a64f84ace0f42cec3072f67bbe8bd81545fcdd665daa2327
- MD5 SHA1 SHA512
-
Executes dropped EXE
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Legitimate hosting services abused for malware hosting/C2