General
-
Target
5748091becee409bf6b867b6bd520a18a12f03ef8b84cdb5b0d5bc1bdff3c49d
-
Size
1.0MB
-
Sample
220724-3tchzaeabr
-
MD5
5d7612eeb78279bb95479653542c6f47
-
SHA1
e762cfa271c79e1df08612a083fa3288a555c27c
-
SHA256
5748091becee409bf6b867b6bd520a18a12f03ef8b84cdb5b0d5bc1bdff3c49d
-
SHA512
c819a5179a1bafaf3fe8d449878140c071823e22c35a197908d66c5b7f8f17fb0985dcbaf58652fb087070e6f6717ecc02dfabcfd52a6344b5fa58911e075ee2
Static task
static1
Behavioral task
behavioral1
Sample
5748091becee409bf6b867b6bd520a18a12f03ef8b84cdb5b0d5bc1bdff3c49d.exe
Resource
win7-20220718-en
Behavioral task
behavioral2
Sample
5748091becee409bf6b867b6bd520a18a12f03ef8b84cdb5b0d5bc1bdff3c49d.exe
Resource
win10v2004-20220721-en
Malware Config
Targets
-
-
Target
5748091becee409bf6b867b6bd520a18a12f03ef8b84cdb5b0d5bc1bdff3c49d
-
Size
1.0MB
-
MD5
5d7612eeb78279bb95479653542c6f47
-
SHA1
e762cfa271c79e1df08612a083fa3288a555c27c
-
SHA256
5748091becee409bf6b867b6bd520a18a12f03ef8b84cdb5b0d5bc1bdff3c49d
-
SHA512
c819a5179a1bafaf3fe8d449878140c071823e22c35a197908d66c5b7f8f17fb0985dcbaf58652fb087070e6f6717ecc02dfabcfd52a6344b5fa58911e075ee2
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of SetThreadContext
-