General
-
Target
0f1dc5fe12a28b36a92157b6c45e710987e525afd4bae6dc6dc345f45fb16cdd
-
Size
4.1MB
-
Sample
220923-dy9ltsdaa8
-
MD5
191fc382220e86949cb79cb54e268b08
-
SHA1
07529235a51a3b9bb22c25a50c72ccfcf701ebec
-
SHA256
0f1dc5fe12a28b36a92157b6c45e710987e525afd4bae6dc6dc345f45fb16cdd
-
SHA512
c3d5d71248313ff2456a58f789bfe11dc5d5b72e073468edb67558141ec70c3d239b5dc6a93e63b1aa57c51567c962d854700775cf37dc6c96d012e8ce560bde
-
SSDEEP
98304:tvFhteKinUxNh9/CMh0GKs4+SO+FQ/I0roobSV3MrRLV7PN8oJI0Zn:lFhIKuUfCMWsNukIYdUIBPN8oJIS
Static task
static1
Malware Config
Targets
-
-
Target
0f1dc5fe12a28b36a92157b6c45e710987e525afd4bae6dc6dc345f45fb16cdd
-
Size
4.1MB
-
MD5
191fc382220e86949cb79cb54e268b08
-
SHA1
07529235a51a3b9bb22c25a50c72ccfcf701ebec
-
SHA256
0f1dc5fe12a28b36a92157b6c45e710987e525afd4bae6dc6dc345f45fb16cdd
-
SHA512
c3d5d71248313ff2456a58f789bfe11dc5d5b72e073468edb67558141ec70c3d239b5dc6a93e63b1aa57c51567c962d854700775cf37dc6c96d012e8ce560bde
-
SSDEEP
98304:tvFhteKinUxNh9/CMh0GKs4+SO+FQ/I0roobSV3MrRLV7PN8oJI0Zn:lFhIKuUfCMWsNukIYdUIBPN8oJIS
-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Executes dropped EXE
-
Modifies Windows Firewall
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-