General
-
Target
56d4f0d075dfec26d31ef1b88f76fd6ad7c9538d7157d77034c42fa63dc94c36
-
Size
1.0MB
-
Sample
220725-bywnvshebk
-
MD5
3c5b6d87a047d282df72f0336e9d8a2e
-
SHA1
83fa0143492160d9476e7e74783dea1c7806f457
-
SHA256
56d4f0d075dfec26d31ef1b88f76fd6ad7c9538d7157d77034c42fa63dc94c36
-
SHA512
570ea25f377018ade2b7476aab726a9fae8dadb917001c9823ec4af9aaa1b83eb27a80b6610fc5695c8fe5ea4771478e74e33fe29902519fc0097aa46b9632ea
Static task
static1
Behavioral task
behavioral1
Sample
56d4f0d075dfec26d31ef1b88f76fd6ad7c9538d7157d77034c42fa63dc94c36.exe
Resource
win7-20220715-en
Malware Config
Targets
-
-
Target
56d4f0d075dfec26d31ef1b88f76fd6ad7c9538d7157d77034c42fa63dc94c36
-
Size
1.0MB
-
MD5
3c5b6d87a047d282df72f0336e9d8a2e
-
SHA1
83fa0143492160d9476e7e74783dea1c7806f457
-
SHA256
56d4f0d075dfec26d31ef1b88f76fd6ad7c9538d7157d77034c42fa63dc94c36
-
SHA512
570ea25f377018ade2b7476aab726a9fae8dadb917001c9823ec4af9aaa1b83eb27a80b6610fc5695c8fe5ea4771478e74e33fe29902519fc0097aa46b9632ea
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of SetThreadContext
-