General
-
Target
13a37f34ff1ccb8ec9ea8f6ad73b3f10611be3ac5c3ae1d26a1a4c06a5b7f298
-
Size
4.1MB
-
Sample
220917-tbfcgaaab6
-
MD5
95049088ee966212e81419011f1e5004
-
SHA1
cc219c2cf20f81d9dcadf1df73011a944353f540
-
SHA256
13a37f34ff1ccb8ec9ea8f6ad73b3f10611be3ac5c3ae1d26a1a4c06a5b7f298
-
SHA512
ccaee33076e7c338fb1b829b8bcb422a303d1c8e887483e129e26c76fac9da540f04d5b4fe0c286c0a43785722eade2084f38f6118ea417576cc0f0a6d247714
-
SSDEEP
98304:GyWC2ggvUb9XR8qlYaJbwuJHlFyfyYDy7B562gd/x+yWTokzC:77gvEhTbLyD4j8QyWTRm
Static task
static1
Malware Config
Targets
-
-
Target
13a37f34ff1ccb8ec9ea8f6ad73b3f10611be3ac5c3ae1d26a1a4c06a5b7f298
-
Size
4.1MB
-
MD5
95049088ee966212e81419011f1e5004
-
SHA1
cc219c2cf20f81d9dcadf1df73011a944353f540
-
SHA256
13a37f34ff1ccb8ec9ea8f6ad73b3f10611be3ac5c3ae1d26a1a4c06a5b7f298
-
SHA512
ccaee33076e7c338fb1b829b8bcb422a303d1c8e887483e129e26c76fac9da540f04d5b4fe0c286c0a43785722eade2084f38f6118ea417576cc0f0a6d247714
-
SSDEEP
98304:GyWC2ggvUb9XR8qlYaJbwuJHlFyfyYDy7B562gd/x+yWTokzC:77gvEhTbLyD4j8QyWTRm
-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Executes dropped EXE
-
Modifies Windows Firewall
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-