General
-
Target
5c74e1ec5763750131926488e18af3dcc873b62fd3a84b7a137dd040aaf468af
-
Size
4.0MB
-
Sample
221002-slgslsdecm
-
MD5
588656ac6c422146b6ce65e28d1cf4c2
-
SHA1
e149d4ee64761af7f6e4e9de929bdc6956fabb42
-
SHA256
5c74e1ec5763750131926488e18af3dcc873b62fd3a84b7a137dd040aaf468af
-
SHA512
3b16bfb430f06c6addef9989d144bc17503a18a3016c49113f31be7f05447e95ed1af4375b0660db6bc318ddb144f44d1ab30683748b065b48000f1c02367e9e
-
SSDEEP
98304:0+H/ct7qopY3fp1G8236Gr4eG6kI9sAESpDmGBF516a3l3aN:0+Hm79Ifpo8E6jUkBAEYq6Z+
Static task
static1
Malware Config
Targets
-
-
Target
5c74e1ec5763750131926488e18af3dcc873b62fd3a84b7a137dd040aaf468af
-
Size
4.0MB
-
MD5
588656ac6c422146b6ce65e28d1cf4c2
-
SHA1
e149d4ee64761af7f6e4e9de929bdc6956fabb42
-
SHA256
5c74e1ec5763750131926488e18af3dcc873b62fd3a84b7a137dd040aaf468af
-
SHA512
3b16bfb430f06c6addef9989d144bc17503a18a3016c49113f31be7f05447e95ed1af4375b0660db6bc318ddb144f44d1ab30683748b065b48000f1c02367e9e
-
SSDEEP
98304:0+H/ct7qopY3fp1G8236Gr4eG6kI9sAESpDmGBF516a3l3aN:0+Hm79Ifpo8E6jUkBAEYq6Z+
-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Executes dropped EXE
-
Modifies Windows Firewall
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-