General
-
Target
0smB_KXUJEmINSIVnYJQ7Mcn.exe
-
Size
4.0MB
-
Sample
220914-rx4wvaaeh2
-
MD5
e0f8a46cc94aa3368ea092c3c92cdb1c
-
SHA1
d605e836cb311c98eb6fe0f701af22870fa88170
-
SHA256
c458e8a37a66244af6de16aac2367ed24616f8ea8c1f2dd5deefb3d1c86fe6aa
-
SHA512
09a8b9ace318d350dd7ccc84e7259570742cffbc24e99a510c3d56a4c488adc1fec755dd27f4f4484b26f37f2dddd94e4b272419817f73ee1e93a1c0908865c7
-
SSDEEP
49152:OF4hredKCriSz78iM7HP5/HpmLE5Mo8nY/wA6bJDTNfdMq0kYjr6DhnUYxA7IEs9:/redKC+SAhp0zjpTLMqYn6DuB7IxoUV9
Static task
static1
Malware Config
Targets
-
-
Target
0smB_KXUJEmINSIVnYJQ7Mcn.exe
-
Size
4.0MB
-
MD5
e0f8a46cc94aa3368ea092c3c92cdb1c
-
SHA1
d605e836cb311c98eb6fe0f701af22870fa88170
-
SHA256
c458e8a37a66244af6de16aac2367ed24616f8ea8c1f2dd5deefb3d1c86fe6aa
-
SHA512
09a8b9ace318d350dd7ccc84e7259570742cffbc24e99a510c3d56a4c488adc1fec755dd27f4f4484b26f37f2dddd94e4b272419817f73ee1e93a1c0908865c7
-
SSDEEP
49152:OF4hredKCriSz78iM7HP5/HpmLE5Mo8nY/wA6bJDTNfdMq0kYjr6DhnUYxA7IEs9:/redKC+SAhp0zjpTLMqYn6DuB7IxoUV9
-
Executes dropped EXE
-
Modifies Windows Firewall
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-