General
-
Target
cbd42f44c0f85e54a7f5a67e58dc08004596b973a8238b01c4e767729a78f74f
-
Size
4.0MB
-
Sample
220829-ewxd6acfd7
-
MD5
78eec9b8c977f035f2cb90667e9f203c
-
SHA1
f3fa4b6b5aae55f4c52dd9ca6abcadc5b46b9b33
-
SHA256
cbd42f44c0f85e54a7f5a67e58dc08004596b973a8238b01c4e767729a78f74f
-
SHA512
a2967acd38ba3023fc1c69e8990d139fac539c1fc36e4caaff5b2eae2b9119621cf3991ac6d6558cca131a78634424e6021c390a84095d4dfaec114959b05f2b
-
SSDEEP
98304:gp8JoKXC6WjoKqJaDVm2GI7sqJLxOXzyuwCpCGh8Za5cYFlD:BojvjTqJaxm2XVxOjSCRhr5cYF5
Static task
static1
Malware Config
Targets
-
-
Target
cbd42f44c0f85e54a7f5a67e58dc08004596b973a8238b01c4e767729a78f74f
-
Size
4.0MB
-
MD5
78eec9b8c977f035f2cb90667e9f203c
-
SHA1
f3fa4b6b5aae55f4c52dd9ca6abcadc5b46b9b33
-
SHA256
cbd42f44c0f85e54a7f5a67e58dc08004596b973a8238b01c4e767729a78f74f
-
SHA512
a2967acd38ba3023fc1c69e8990d139fac539c1fc36e4caaff5b2eae2b9119621cf3991ac6d6558cca131a78634424e6021c390a84095d4dfaec114959b05f2b
-
SSDEEP
98304:gp8JoKXC6WjoKqJaDVm2GI7sqJLxOXzyuwCpCGh8Za5cYFlD:BojvjTqJaxm2XVxOjSCRhr5cYF5
-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Executes dropped EXE
-
Modifies Windows Firewall
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-