General
- Target 355187cd71c38b58210b22e41e9d3df14dbfca3750328.exe
- Size 997KB
- Sample230508-2fcfdaeh2v
- SHA256 355187cd71c38b58210b22e41e9d3df14dbfca37503289038b1c0a71c08491c2
- MD5 eafe753a6fd3d7e298974135a34d565c
- SHA1 730746fc357826b16bd05d3b7d387d9e70b8f3e9
- SHA512 d37ced4515ddc0bb2fc9019ad907998070092edcc3f75737ce967a4dbedd24362dc6f138f7a5dabf38a45c0b9bd7fbf19c81529fce36a8021da22bac210174de
- SSDEEP 12288:AfrDf9O0ktG6Iq8mZrAHOtEpx/CvwDN+JouZDIuVP50nziW9g9:GPf9FktZ1Zg5p9CvyNqo8BQQ
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
355187cd71c38b58210b22e41e9d3df14dbfca3750328.exe
Resource
win7-20230220-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 355187cd71c38b58210b22e41e9d3df14dbfca3750328.exe
- Size 997KB
- SHA256 355187cd71c38b58210b22e41e9d3df14dbfca37503289038b1c0a71c08491c2
- MD5 eafe753a6fd3d7e298974135a34d565c
- SHA1 730746fc357826b16bd05d3b7d387d9e70b8f3e9
- SHA512 d37ced4515ddc0bb2fc9019ad907998070092edcc3f75737ce967a4dbedd24362dc6f138f7a5dabf38a45c0b9bd7fbf19c81529fce36a8021da22bac210174de
- SSDEEP 12288:AfrDf9O0ktG6Iq8mZrAHOtEpx/CvwDN+JouZDIuVP50nziW9g9:GPf9FktZ1Zg5p9CvyNqo8BQQ
- MD5 SHA1 SHA512 SSDEEP
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of SetThreadContext