General
- Target ED330FF9FFEB5C0935FDDD855FB4CBC0.exe
- Size 496KB
- Sample210724-g8sawbl3de
- SHA256 2eee0fe004e7d90317053ea8f10fddcc0dc4c7ab9e17ab50b96a6ea167eb855e
- MD5 ed330ff9ffeb5c0935fddd855fb4cbc0
- SHA1 44ecce5b2cc95d79cb5f2b6a73dadb7956748dc9
- SHA512 fee4686095f4aab5774b4922d02175187e1430aa6e3e0d45e99120cc01944698166c8d7b207bf9615ed466a7021fb6ee0911919ad7f0a68956fa50f3ccaeac27
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
ED330FF9FFEB5C0935FDDD855FB4CBC0.exe
Resource
win7v20210410
0 signatures
0 seconds
Malware Config
Targets
-
- Target ED330FF9FFEB5C0935FDDD855FB4CBC0.exe
- Size 496KB
- SHA256 2eee0fe004e7d90317053ea8f10fddcc0dc4c7ab9e17ab50b96a6ea167eb855e
- MD5 ed330ff9ffeb5c0935fddd855fb4cbc0
- SHA1 44ecce5b2cc95d79cb5f2b6a73dadb7956748dc9
- SHA512 fee4686095f4aab5774b4922d02175187e1430aa6e3e0d45e99120cc01944698166c8d7b207bf9615ed466a7021fb6ee0911919ad7f0a68956fa50f3ccaeac27
- MD5 SHA1 SHA512
-
Downloads MZ/PE file
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of SetThreadContext