General
-
Target
update-recharge.exe
-
Size
353KB
-
Sample
200916-s3m5d5whta
-
MD5
c1b6185f5ba6a3d5c4e1017b1b684492
-
SHA1
005ab0f0d9ec20c7dbb4512489f17bcb7494fe0e
-
SHA256
68a83d0a3bfcd1bcebf35eeba2bd778b2b64516f73cb2932ad9e6e4667dd9781
-
SHA512
23766708489576355d3e2893f59ef1179cc3bbf6379a48709f7bd3bd8aa9bc7bd2d527983f5d8fa23cf7e4a114f8f9c65882b949133b027b4be97e4d05a44dc4
Static task
static1
Behavioral task
behavioral1
Sample
update-recharge.exe
Resource
win7
Malware Config
Extracted
buer
https://kackdelar.top/
Targets
-
-
Target
update-recharge.exe
-
Size
353KB
-
MD5
c1b6185f5ba6a3d5c4e1017b1b684492
-
SHA1
005ab0f0d9ec20c7dbb4512489f17bcb7494fe0e
-
SHA256
68a83d0a3bfcd1bcebf35eeba2bd778b2b64516f73cb2932ad9e6e4667dd9781
-
SHA512
23766708489576355d3e2893f59ef1179cc3bbf6379a48709f7bd3bd8aa9bc7bd2d527983f5d8fa23cf7e4a114f8f9c65882b949133b027b4be97e4d05a44dc4
-
Buer Loader
Detects Buer loader in memory or disk.
-
Drops startup file
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Suspicious use of SetThreadContext
-