General
-
Target
a85744a53ae320e0531e3e4c394f95fea54c30aeb9c94e0983a06040b8c4e56b
-
Size
4.0MB
-
Sample
220930-watvksebh8
-
MD5
0374ceb03c911f3da074fbaf32f9d0e2
-
SHA1
6f4d6a6c159f4a0a792cb91424122342033728c8
-
SHA256
a85744a53ae320e0531e3e4c394f95fea54c30aeb9c94e0983a06040b8c4e56b
-
SHA512
4f4507756c9ab2213bd15086e89b6ba8d6f8d782e90a2038fb542977bc8571118c908ddf7dfaacc35383788f47463182a0f0b7b50ef8cb84f5cc5fd8d9c7859e
-
SSDEEP
98304:q6BINiOKW2/2RncBsamMYqM+GgSh8N2TahfIEwp6SkL+GzkIT+JN+R:qHIXW2/lzXN4eITcItp6SZGzT+e
Static task
static1
Malware Config
Targets
-
-
Target
a85744a53ae320e0531e3e4c394f95fea54c30aeb9c94e0983a06040b8c4e56b
-
Size
4.0MB
-
MD5
0374ceb03c911f3da074fbaf32f9d0e2
-
SHA1
6f4d6a6c159f4a0a792cb91424122342033728c8
-
SHA256
a85744a53ae320e0531e3e4c394f95fea54c30aeb9c94e0983a06040b8c4e56b
-
SHA512
4f4507756c9ab2213bd15086e89b6ba8d6f8d782e90a2038fb542977bc8571118c908ddf7dfaacc35383788f47463182a0f0b7b50ef8cb84f5cc5fd8d9c7859e
-
SSDEEP
98304:q6BINiOKW2/2RncBsamMYqM+GgSh8N2TahfIEwp6SkL+GzkIT+JN+R:qHIXW2/lzXN4eITcItp6SZGzT+e
-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Executes dropped EXE
-
Modifies Windows Firewall
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-