General
-
Target
91e7a8a26637dd380263a8be0afab319674c789e0348b0ec330f4b9dcdeb4a93
-
Size
4.0MB
-
Sample
220926-2tvh4sdcbj
-
MD5
bd0e9ed2aaf9de6b6a734b6672784e79
-
SHA1
85c4216095db3c1589403c0def1584340fefb0bc
-
SHA256
91e7a8a26637dd380263a8be0afab319674c789e0348b0ec330f4b9dcdeb4a93
-
SHA512
a8998f7fecfd21af2393fe703f2a84a753e3e30dadce692e348af5f73b0d1145eea79b5d25c28e6cbb2cdae8bc2ce8722c0ea8bd8deb8a7e13f9df5966d6b022
-
SSDEEP
98304:fqCcuxnEfyHC4Cjlb7w2wmorqTdveU1kDJc:9DtPCjJ7w2JxdWUAC
Static task
static1
Malware Config
Targets
-
-
Target
91e7a8a26637dd380263a8be0afab319674c789e0348b0ec330f4b9dcdeb4a93
-
Size
4.0MB
-
MD5
bd0e9ed2aaf9de6b6a734b6672784e79
-
SHA1
85c4216095db3c1589403c0def1584340fefb0bc
-
SHA256
91e7a8a26637dd380263a8be0afab319674c789e0348b0ec330f4b9dcdeb4a93
-
SHA512
a8998f7fecfd21af2393fe703f2a84a753e3e30dadce692e348af5f73b0d1145eea79b5d25c28e6cbb2cdae8bc2ce8722c0ea8bd8deb8a7e13f9df5966d6b022
-
SSDEEP
98304:fqCcuxnEfyHC4Cjlb7w2wmorqTdveU1kDJc:9DtPCjJ7w2JxdWUAC
-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Executes dropped EXE
-
Modifies Windows Firewall
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-