General
-
Target
cdc8470cca5718f2cf981ddc950c58900ea8dbb0aea03c7f0f85a146d1b42241
-
Size
4.0MB
-
Sample
220926-qvsv5aahe9
-
MD5
0522f43ff2c44b384f70ccd27f2dc5ec
-
SHA1
91424d9436337af9bcadf93517ded53b66326eee
-
SHA256
cdc8470cca5718f2cf981ddc950c58900ea8dbb0aea03c7f0f85a146d1b42241
-
SHA512
e9ebb88291f37c84a1538cd45c939601db191af92e4e6ae2b2bd8ff74ebacadf6765d67b2735c0d4ac3d13562f3447af9f38414ad4185bc698cb787c50da7052
-
SSDEEP
98304:Ug6iqVKl2Z1uH/gVsQjR5TvC0rsAT7ADiRSSpvnr+ad:L6i7AZ1uw5Tv7rjHAgSSpvD
Static task
static1
Malware Config
Targets
-
-
Target
cdc8470cca5718f2cf981ddc950c58900ea8dbb0aea03c7f0f85a146d1b42241
-
Size
4.0MB
-
MD5
0522f43ff2c44b384f70ccd27f2dc5ec
-
SHA1
91424d9436337af9bcadf93517ded53b66326eee
-
SHA256
cdc8470cca5718f2cf981ddc950c58900ea8dbb0aea03c7f0f85a146d1b42241
-
SHA512
e9ebb88291f37c84a1538cd45c939601db191af92e4e6ae2b2bd8ff74ebacadf6765d67b2735c0d4ac3d13562f3447af9f38414ad4185bc698cb787c50da7052
-
SSDEEP
98304:Ug6iqVKl2Z1uH/gVsQjR5TvC0rsAT7ADiRSSpvnr+ad:L6i7AZ1uw5Tv7rjHAgSSpvD
-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Executes dropped EXE
-
Modifies Windows Firewall
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-