General
-
Target
setup.exe
-
Size
379KB
-
Sample
211024-dmjw2adhal
-
MD5
3329dc6e93761fd9597063f368ea952c
-
SHA1
bc1e6f6a5d19ae794547f3c7e78f6bc0dadc7d3f
-
SHA256
cc5c6a78feac84ff7936e15863c4d4b02cab421b8c09c4735212bf8dbb07adfb
-
SHA512
9ac13f9f210d87fa29ebc5c9440abc43550a045ea9816d21b1ea8f0532d4dbe262e6842a1dddbcd61eb40cab9b62f7c2f1e8ad361c7cca7a6a84230be3bdfda9
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win7-en-20211014
Malware Config
Targets
-
-
Target
setup.exe
-
Size
379KB
-
MD5
3329dc6e93761fd9597063f368ea952c
-
SHA1
bc1e6f6a5d19ae794547f3c7e78f6bc0dadc7d3f
-
SHA256
cc5c6a78feac84ff7936e15863c4d4b02cab421b8c09c4735212bf8dbb07adfb
-
SHA512
9ac13f9f210d87fa29ebc5c9440abc43550a045ea9816d21b1ea8f0532d4dbe262e6842a1dddbcd61eb40cab9b62f7c2f1e8ad361c7cca7a6a84230be3bdfda9
-
suricata: ET MALWARE JS/Nemucod requesting EXE payload 2016-02-01
suricata: ET MALWARE JS/Nemucod requesting EXE payload 2016-02-01
-
suricata: ET MALWARE JS/Nemucod.M.gen downloading EXE payload
suricata: ET MALWARE JS/Nemucod.M.gen downloading EXE payload
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-