General
-
Target
f92a2e69cee1d836ea6f5805e99156ab4a11e2b7c58ca55b94eb7651cba5f080
-
Size
4.0MB
-
Sample
220921-s45mdscbgn
-
MD5
9e94f2f6755f7c41ceaba7c2f35b9e15
-
SHA1
5ababdeb47687928591bef67c4d87f87987a9ed3
-
SHA256
f92a2e69cee1d836ea6f5805e99156ab4a11e2b7c58ca55b94eb7651cba5f080
-
SHA512
dbc606f058fd89f295ff5eb9681f3549f89d1a28e5d9252e03115321f411d78bd087539bc32c1166ee3c16190799b8f506dea710b679075a199adf670b49381b
-
SSDEEP
98304:xeP/T1ZczzrGOWhPmPCK1cLYTckodhI0CvplhR+Pw3UpcEkb:A/XOPGOWheaK1LTc9dGbWw3Upcnb
Static task
static1
Malware Config
Targets
-
-
Target
f92a2e69cee1d836ea6f5805e99156ab4a11e2b7c58ca55b94eb7651cba5f080
-
Size
4.0MB
-
MD5
9e94f2f6755f7c41ceaba7c2f35b9e15
-
SHA1
5ababdeb47687928591bef67c4d87f87987a9ed3
-
SHA256
f92a2e69cee1d836ea6f5805e99156ab4a11e2b7c58ca55b94eb7651cba5f080
-
SHA512
dbc606f058fd89f295ff5eb9681f3549f89d1a28e5d9252e03115321f411d78bd087539bc32c1166ee3c16190799b8f506dea710b679075a199adf670b49381b
-
SSDEEP
98304:xeP/T1ZczzrGOWhPmPCK1cLYTckodhI0CvplhR+Pw3UpcEkb:A/XOPGOWheaK1LTc9dGbWw3Upcnb
-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Executes dropped EXE
-
Modifies Windows Firewall
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-