General
-
Target
a163d621f0ca57a0d6d8b0536ab1a6027cedbff84bcb1045d847759e0e1bd4f5
-
Size
4.0MB
-
Sample
221001-xtk78acgbr
-
MD5
c7ea265423fbe251596a132c0c49a07d
-
SHA1
9c8b8ecc90bfb9c37a5b5ad0c574a7c9e4b6b6c1
-
SHA256
a163d621f0ca57a0d6d8b0536ab1a6027cedbff84bcb1045d847759e0e1bd4f5
-
SHA512
a0d26dbaa281acd305f94ac82efc4e8c51ff07b2598d092576c68089ac2a1cba6c41552a76ebf2bc0f84b4e4f2dc62065af6ff8ea6236a5eb0af6d8c5f334f11
-
SSDEEP
98304:5PcfdTBJWqcIHOyruXPLoqVAWUZ+3s7kxiH6BEIaRaXgvND:5PclTbWq1OIcoqtU0cwxiH66EQvND
Static task
static1
Malware Config
Targets
-
-
Target
a163d621f0ca57a0d6d8b0536ab1a6027cedbff84bcb1045d847759e0e1bd4f5
-
Size
4.0MB
-
MD5
c7ea265423fbe251596a132c0c49a07d
-
SHA1
9c8b8ecc90bfb9c37a5b5ad0c574a7c9e4b6b6c1
-
SHA256
a163d621f0ca57a0d6d8b0536ab1a6027cedbff84bcb1045d847759e0e1bd4f5
-
SHA512
a0d26dbaa281acd305f94ac82efc4e8c51ff07b2598d092576c68089ac2a1cba6c41552a76ebf2bc0f84b4e4f2dc62065af6ff8ea6236a5eb0af6d8c5f334f11
-
SSDEEP
98304:5PcfdTBJWqcIHOyruXPLoqVAWUZ+3s7kxiH6BEIaRaXgvND:5PclTbWq1OIcoqtU0cwxiH66EQvND
-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Executes dropped EXE
-
Modifies Windows Firewall
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-