General
- Target CB04EE69CA77611D15BF1CB1C3A37B52.exe
- Size 1.5MB
- Sample210830-mngs8ld2as
- SHA256 3ab7eca908cbfcc0aefea517b4482efbe5c0e7c6c55b23ae3d05125fb5cc29e4
- MD5 cb04ee69ca77611d15bf1cb1c3a37b52
- SHA1 90c0923fcd672c7cbe4079cde5d08641edde65ea
- SHA512 a0f291450390a7dbaa4479fdd4f62fa26057a2ac5376569900accac744c775aceb346dad4c62c164f5ffb31b30fb4ae778a0b100465f5699bf1b965de51f44bd
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
CB04EE69CA77611D15BF1CB1C3A37B52.exe
Resource
win7v20210408
0 signatures
0 seconds
Malware Config
Targets
-
- Target CB04EE69CA77611D15BF1CB1C3A37B52.exe
- Size 1.5MB
- SHA256 3ab7eca908cbfcc0aefea517b4482efbe5c0e7c6c55b23ae3d05125fb5cc29e4
- MD5 cb04ee69ca77611d15bf1cb1c3a37b52
- SHA1 90c0923fcd672c7cbe4079cde5d08641edde65ea
- SHA512 a0f291450390a7dbaa4479fdd4f62fa26057a2ac5376569900accac744c775aceb346dad4c62c164f5ffb31b30fb4ae778a0b100465f5699bf1b965de51f44bd
- MD5 SHA1 SHA512
-
Downloads MZ/PE file
-
Deletes itself
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of NtSetInformationThreadHideFromDebugger