General
-
Target
8467d261c7f6e52faa3985bdd9bd05dace0793b60d780a4cb5bcc3b8a01b6059
-
Size
4.0MB
-
Sample
220923-h8r7rahdhj
-
MD5
6ce2d82ab23c2a4ee185fdb2976d870c
-
SHA1
2526dd220730999aa0e3b8dce5d068c6447cdc34
-
SHA256
8467d261c7f6e52faa3985bdd9bd05dace0793b60d780a4cb5bcc3b8a01b6059
-
SHA512
868d2ec105955e325803726df56d4a88fdac84fa9b7a6efce17228bb96063cb52034612fe0060a4e5b889ea2c2239ee5c8dcd1aa3358be4b315d41e692a3ceea
-
SSDEEP
98304:tp7UEe1KFrnRyCkTd49v55wA6Il+uRJEMaq4nM0W04pEJ9:tpoxOrRyCo49Lj6aEMj0t
Static task
static1
Malware Config
Targets
-
-
Target
8467d261c7f6e52faa3985bdd9bd05dace0793b60d780a4cb5bcc3b8a01b6059
-
Size
4.0MB
-
MD5
6ce2d82ab23c2a4ee185fdb2976d870c
-
SHA1
2526dd220730999aa0e3b8dce5d068c6447cdc34
-
SHA256
8467d261c7f6e52faa3985bdd9bd05dace0793b60d780a4cb5bcc3b8a01b6059
-
SHA512
868d2ec105955e325803726df56d4a88fdac84fa9b7a6efce17228bb96063cb52034612fe0060a4e5b889ea2c2239ee5c8dcd1aa3358be4b315d41e692a3ceea
-
SSDEEP
98304:tp7UEe1KFrnRyCkTd49v55wA6Il+uRJEMaq4nM0W04pEJ9:tpoxOrRyCo49Lj6aEMj0t
-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Executes dropped EXE
-
Modifies Windows Firewall
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-