General
-
Target
c16d43f02450ff2e1ee82cc17c8f9cc8ed294192241da11e0e6af052a2768e08
-
Size
4.0MB
-
Sample
220920-eyzbjabhf9
-
MD5
43ca4970bf0ae8bcbb8c2b13a3d5e807
-
SHA1
e806d0b17a22742ba4306f1f473da893f99443e0
-
SHA256
c16d43f02450ff2e1ee82cc17c8f9cc8ed294192241da11e0e6af052a2768e08
-
SHA512
6ae29758a0eff8dd01ce6ace73dae4a349a075e2f5845ccedbc23615e3a3f9e28f4506915d70e1fe091097fab348905d27ee581d9a00e770d9d080510aa6b186
-
SSDEEP
49152:1Z3Lq+jx+bEwvBKC2CQYUy+FBrKF7QtCAzM5VU0iQ0ih/YmkHHaoMEZoMGbllnIX:nq+jx+rR7iF0H2qrEhHVMEZjket
Static task
static1
Malware Config
Targets
-
-
Target
c16d43f02450ff2e1ee82cc17c8f9cc8ed294192241da11e0e6af052a2768e08
-
Size
4.0MB
-
MD5
43ca4970bf0ae8bcbb8c2b13a3d5e807
-
SHA1
e806d0b17a22742ba4306f1f473da893f99443e0
-
SHA256
c16d43f02450ff2e1ee82cc17c8f9cc8ed294192241da11e0e6af052a2768e08
-
SHA512
6ae29758a0eff8dd01ce6ace73dae4a349a075e2f5845ccedbc23615e3a3f9e28f4506915d70e1fe091097fab348905d27ee581d9a00e770d9d080510aa6b186
-
SSDEEP
49152:1Z3Lq+jx+bEwvBKC2CQYUy+FBrKF7QtCAzM5VU0iQ0ih/YmkHHaoMEZoMGbllnIX:nq+jx+rR7iF0H2qrEhHVMEZjket
-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Executes dropped EXE
-
Modifies Windows Firewall
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-