General
-
Target
Document_Opener.exe.14.dr
-
Size
1.4MB
-
Sample
210410-3cqzjcbqw6
-
MD5
4d182167da3f24bfb9e80469b0d7d62a
-
SHA1
1bb377017690bd7066bb98658a8bb90d91feeb93
-
SHA256
e0fb60da371912c158861c9660632d58e45cfcff12351cc9e03f497f319eb5de
-
SHA512
1ea73e9857320cf1571ffef0ec8ce042ff708c2ab8b8cde890f6afe3f82ac2e8106a2539d729f7e018ae0e82eb364eca3a0bea5f6acc919855574cbac2784302
Static task
static1
Malware Config
Extracted
rustybuer
https://gestahibanking.com/
Targets
-
-
Target
Document_Opener.exe.14.dr
-
Size
1.4MB
-
MD5
4d182167da3f24bfb9e80469b0d7d62a
-
SHA1
1bb377017690bd7066bb98658a8bb90d91feeb93
-
SHA256
e0fb60da371912c158861c9660632d58e45cfcff12351cc9e03f497f319eb5de
-
SHA512
1ea73e9857320cf1571ffef0ec8ce042ff708c2ab8b8cde890f6afe3f82ac2e8106a2539d729f7e018ae0e82eb364eca3a0bea5f6acc919855574cbac2784302
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Suspicious use of SetThreadContext
-