General
-
Target
cb934d88760dd5dd7c103eb1de62afb9dfea2bd717aba016d21373224cfffd15
-
Size
5.1MB
-
Sample
220724-vxxdjscch9
-
MD5
bb1d7230fb4b22c827436a7dd76cf63f
-
SHA1
d74525bfa6e970e2f9bc74ec35d5755473160720
-
SHA256
cb934d88760dd5dd7c103eb1de62afb9dfea2bd717aba016d21373224cfffd15
-
SHA512
1d03ba3a54253f3ec0cecaccd1bd92d4737c847d0d3aaff8139f5573774458ed35057122ef27c1082c1b0b27cb6a463aa88731e39fd519bf6de39df21b68e68e
Static task
static1
Behavioral task
behavioral1
Sample
cb934d88760dd5dd7c103eb1de62afb9dfea2bd717aba016d21373224cfffd15.exe
Resource
win7-20220715-en
Malware Config
Targets
-
-
Target
cb934d88760dd5dd7c103eb1de62afb9dfea2bd717aba016d21373224cfffd15
-
Size
5.1MB
-
MD5
bb1d7230fb4b22c827436a7dd76cf63f
-
SHA1
d74525bfa6e970e2f9bc74ec35d5755473160720
-
SHA256
cb934d88760dd5dd7c103eb1de62afb9dfea2bd717aba016d21373224cfffd15
-
SHA512
1d03ba3a54253f3ec0cecaccd1bd92d4737c847d0d3aaff8139f5573774458ed35057122ef27c1082c1b0b27cb6a463aa88731e39fd519bf6de39df21b68e68e
-
Glupteba payload
-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Executes dropped EXE
-
Modifies Windows Firewall
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory
-