General
-
Target
5d7c70eed8dc9ccafb4ab209e7416e92fc8d7d6e46b933a28d3a5c2bf4f0d204
-
Size
4.0MB
-
Sample
220926-bv4v3aaadj
-
MD5
6be2649786a8216eeae2f00ba7adf0d5
-
SHA1
603a300584cbe1354dd27308a68f9908e4f6b63c
-
SHA256
5d7c70eed8dc9ccafb4ab209e7416e92fc8d7d6e46b933a28d3a5c2bf4f0d204
-
SHA512
8afdad4d90f116e34c0f0c66459dee5845449cab1e278ce0518b68e2c3e5e83b33089db4d631e4222a5eea7c290e8dfa0783121e598b4479c683e30097821263
-
SSDEEP
98304:PSwhEfGtiJU36rJyITBbqF95vfHWsea5I9K/B:a6EI5vITBbqL5nWQ/p
Static task
static1
Malware Config
Targets
-
-
Target
5d7c70eed8dc9ccafb4ab209e7416e92fc8d7d6e46b933a28d3a5c2bf4f0d204
-
Size
4.0MB
-
MD5
6be2649786a8216eeae2f00ba7adf0d5
-
SHA1
603a300584cbe1354dd27308a68f9908e4f6b63c
-
SHA256
5d7c70eed8dc9ccafb4ab209e7416e92fc8d7d6e46b933a28d3a5c2bf4f0d204
-
SHA512
8afdad4d90f116e34c0f0c66459dee5845449cab1e278ce0518b68e2c3e5e83b33089db4d631e4222a5eea7c290e8dfa0783121e598b4479c683e30097821263
-
SSDEEP
98304:PSwhEfGtiJU36rJyITBbqF95vfHWsea5I9K/B:a6EI5vITBbqL5nWQ/p
-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Executes dropped EXE
-
Modifies Windows Firewall
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-