General
-
Target
94083a21dd37c98ad5025f6d4e965a89be4beb6f3aac6302690361b0928db891
-
Size
4.1MB
-
Sample
220915-l6smaagddn
-
MD5
7a1faf60de16d541f2ea5a908c8271c0
-
SHA1
6f6ed27c63dbaaf61a644288bb10d053fdbd5448
-
SHA256
94083a21dd37c98ad5025f6d4e965a89be4beb6f3aac6302690361b0928db891
-
SHA512
d7efb4cf19549f8298ce7080fc1cfff278844784f083db0aecd2e69c8ee72e60698aca00c9af5558a1263e0ba7170789f3e961e4a143aeb9a1043fb266218dee
-
SSDEEP
98304:qTHrH0JWQkkM2c7NeWiGYD1ZWrhSw5wNNB2Zq1dFVycdu6:gIJZk/2cEWK1ZKDwPp1dFs6
Static task
static1
Malware Config
Targets
-
-
Target
94083a21dd37c98ad5025f6d4e965a89be4beb6f3aac6302690361b0928db891
-
Size
4.1MB
-
MD5
7a1faf60de16d541f2ea5a908c8271c0
-
SHA1
6f6ed27c63dbaaf61a644288bb10d053fdbd5448
-
SHA256
94083a21dd37c98ad5025f6d4e965a89be4beb6f3aac6302690361b0928db891
-
SHA512
d7efb4cf19549f8298ce7080fc1cfff278844784f083db0aecd2e69c8ee72e60698aca00c9af5558a1263e0ba7170789f3e961e4a143aeb9a1043fb266218dee
-
SSDEEP
98304:qTHrH0JWQkkM2c7NeWiGYD1ZWrhSw5wNNB2Zq1dFVycdu6:gIJZk/2cEWK1ZKDwPp1dFs6
-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Executes dropped EXE
-
Modifies Windows Firewall
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-