General
-
Target
d16c5e3e8211b78b0cc886b0b450daf2a059a60223248e15b3b5451e68080720
-
Size
4.0MB
-
Sample
221002-yzhjyshag8
-
MD5
15da91e28ed913530257da41a5dd63be
-
SHA1
3abced171a66c4a7f5af6453f980cfc0a657e47e
-
SHA256
d16c5e3e8211b78b0cc886b0b450daf2a059a60223248e15b3b5451e68080720
-
SHA512
4cc24319eaad4faac7760c8ff5549703b181a1985e51a7a7b77b6f4a7cd76943e2e67dc158beeba358a1b482a52d86c2395e0cb9881a2b0643be192239462b97
-
SSDEEP
98304:+nBj9R1K2nG782uXlByYwF7wJYw1dmQ3UwrnPkbz4i0:+51K2nG782uXlTwlwJY+QQ1b
Static task
static1
Malware Config
Targets
-
-
Target
d16c5e3e8211b78b0cc886b0b450daf2a059a60223248e15b3b5451e68080720
-
Size
4.0MB
-
MD5
15da91e28ed913530257da41a5dd63be
-
SHA1
3abced171a66c4a7f5af6453f980cfc0a657e47e
-
SHA256
d16c5e3e8211b78b0cc886b0b450daf2a059a60223248e15b3b5451e68080720
-
SHA512
4cc24319eaad4faac7760c8ff5549703b181a1985e51a7a7b77b6f4a7cd76943e2e67dc158beeba358a1b482a52d86c2395e0cb9881a2b0643be192239462b97
-
SSDEEP
98304:+nBj9R1K2nG782uXlByYwF7wJYw1dmQ3UwrnPkbz4i0:+51K2nG782uXlTwlwJY+QQ1b
-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Executes dropped EXE
-
Modifies Windows Firewall
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-