General
-
Target
135534179f4cfa4438563d6664ba57fc46e1448f8229ec405e9fde28e13a2bb8
-
Size
1.5MB
-
Sample
220603-ha1fgabgf8
-
MD5
388c57533ab42ee01f3be04304c877c1
-
SHA1
1c38e0b9b975d5ea382e693ca0d2ec30b9dc4af8
-
SHA256
135534179f4cfa4438563d6664ba57fc46e1448f8229ec405e9fde28e13a2bb8
-
SHA512
dcbc810a561f646f7af889d4e1cfbf33c958db4fcb0761837b6b15fcc60c65c3d3e4b78516ffe0ede6a023f009fa7e1fa7be62fdfd527057cf92f9a5c5ab6acd
Static task
static1
Behavioral task
behavioral1
Sample
135534179f4cfa4438563d6664ba57fc46e1448f8229ec405e9fde28e13a2bb8.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
135534179f4cfa4438563d6664ba57fc46e1448f8229ec405e9fde28e13a2bb8.exe
Resource
win10v2004-20220414-en
Malware Config
Targets
-
-
Target
135534179f4cfa4438563d6664ba57fc46e1448f8229ec405e9fde28e13a2bb8
-
Size
1.5MB
-
MD5
388c57533ab42ee01f3be04304c877c1
-
SHA1
1c38e0b9b975d5ea382e693ca0d2ec30b9dc4af8
-
SHA256
135534179f4cfa4438563d6664ba57fc46e1448f8229ec405e9fde28e13a2bb8
-
SHA512
dcbc810a561f646f7af889d4e1cfbf33c958db4fcb0761837b6b15fcc60c65c3d3e4b78516ffe0ede6a023f009fa7e1fa7be62fdfd527057cf92f9a5c5ab6acd
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext
-