General
-
Target
8523ac5f0c9f63d0214f3aaf472bc0bb9bceca5630c2005be86fd17eb84943ad
-
Size
4.0MB
-
Sample
220924-m8635acecn
-
MD5
48045852dd9efbd3d8410bb4d47cbc27
-
SHA1
14f7daf6d7fc8dc88c8cf72a39d3c5e7efcad790
-
SHA256
8523ac5f0c9f63d0214f3aaf472bc0bb9bceca5630c2005be86fd17eb84943ad
-
SHA512
60139091e58331cb97950b6f8e14e29e72112d29fd3c81024d009f4f58b6d609d30a6890ee3ae3d66949cd8857ed44511ff8f46aceccc7de58ff914164460db6
-
SSDEEP
98304:SZHDjfJO+iNWdN2Cvjya331E5Um1lQfJJooGjE0:GH3JOzkdACv9nE1SBJooGjz
Static task
static1
Malware Config
Targets
-
-
Target
8523ac5f0c9f63d0214f3aaf472bc0bb9bceca5630c2005be86fd17eb84943ad
-
Size
4.0MB
-
MD5
48045852dd9efbd3d8410bb4d47cbc27
-
SHA1
14f7daf6d7fc8dc88c8cf72a39d3c5e7efcad790
-
SHA256
8523ac5f0c9f63d0214f3aaf472bc0bb9bceca5630c2005be86fd17eb84943ad
-
SHA512
60139091e58331cb97950b6f8e14e29e72112d29fd3c81024d009f4f58b6d609d30a6890ee3ae3d66949cd8857ed44511ff8f46aceccc7de58ff914164460db6
-
SSDEEP
98304:SZHDjfJO+iNWdN2Cvjya331E5Um1lQfJJooGjE0:GH3JOzkdACv9nE1SBJooGjz
-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Executes dropped EXE
-
Modifies Windows Firewall
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-