General
- Target file.exe
- Size 482KB
- Sample221102-wdevtsafd2
- SHA256 95f3f918b006d20da00352fd115e4e00f1a8f1197e528b342989694ab8551adc
- MD5 d0bca143d5fa946c9d45787010bf6184
- SHA1 870e94947ab0696ce724c7dfc70cdcf1bf8bde1c
- SHA512 0c034ecc50f7d7344c5841d2821808a82ec2e711ce70684ce3a7569f6dadda5fa47aaa0be595ea0a27c5419a2092a81dc871506b2643122c4fe05f2f74c4adfc
- SSDEEP 12288:ELW0WJaPBANE95N4PP2FyeVeCPqxo/kG/:baKE94XNJrxoT
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220901-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 482KB
- SHA256 95f3f918b006d20da00352fd115e4e00f1a8f1197e528b342989694ab8551adc
- MD5 d0bca143d5fa946c9d45787010bf6184
- SHA1 870e94947ab0696ce724c7dfc70cdcf1bf8bde1c
- SHA512 0c034ecc50f7d7344c5841d2821808a82ec2e711ce70684ce3a7569f6dadda5fa47aaa0be595ea0a27c5419a2092a81dc871506b2643122c4fe05f2f74c4adfc
- SSDEEP 12288:ELW0WJaPBANE95N4PP2FyeVeCPqxo/kG/:baKE94XNJrxoT
- MD5 SHA1 SHA512 SSDEEP
-
Loads dropped DLL
-
Uses the VBS compiler for execution
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of SetThreadContext