General
- Target 2ca34c70583ee9f2d4c7bb83ac5b2da2.exe
- Size 212KB
- Sample230417-qv874sed39
- SHA256 46f66b6376c7b9466019e3e6b23e46edf488ab96f99b1f6ec0b7ff0a35d02793
- MD5 2ca34c70583ee9f2d4c7bb83ac5b2da2
- SHA1 80f42f481b7665bd48b8d304831ec351177ad03f
- SHA512 b12f638ab8c14ff5430742d5e6abf2edc93bbb755612d4062a45ec7ee4da105e10acd3227afaf3793902bd597d120dfac8ee3b6bd526332c744da64339d98d02
- SSDEEP 3072:o3CDW8B5cxlbmpjIDlwzwTtQpbX1wP0RFn9iq4l5go1gaXI7iMO:qSzcxlbaj+lwzBKPgFnA/oRa47iM
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
2ca34c70583ee9f2d4c7bb83ac5b2da2.exe
Resource
win7-20230220-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2ca34c70583ee9f2d4c7bb83ac5b2da2.exe
- Size 212KB
- SHA256 46f66b6376c7b9466019e3e6b23e46edf488ab96f99b1f6ec0b7ff0a35d02793
- MD5 2ca34c70583ee9f2d4c7bb83ac5b2da2
- SHA1 80f42f481b7665bd48b8d304831ec351177ad03f
- SHA512 b12f638ab8c14ff5430742d5e6abf2edc93bbb755612d4062a45ec7ee4da105e10acd3227afaf3793902bd597d120dfac8ee3b6bd526332c744da64339d98d02
- SSDEEP 3072:o3CDW8B5cxlbmpjIDlwzwTtQpbX1wP0RFn9iq4l5go1gaXI7iMO:qSzcxlbaj+lwzBKPgFnA/oRa47iM
- MD5 SHA1 SHA512 SSDEEP
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.