General
-
Target
c0731d8ec97fffa773944e972a8645e63ac405e30f0df333fdb9974171ef9de3
-
Size
4.1MB
-
Sample
221003-24kfwsbec6
-
MD5
37ff9fd0f2db6a5abee70536962a1fd0
-
SHA1
5c1db2a9940767a7fc2b714d53fbf7eae1c810c9
-
SHA256
c0731d8ec97fffa773944e972a8645e63ac405e30f0df333fdb9974171ef9de3
-
SHA512
aca45d6fd80c3c4e7f27e01e09287abf4008ae4b9ca4959c67c7cdd10655c2e6611a93759bd96b4a29d23f2ed1d776532a76c63aa22b3dc34f8b16d4955bed7b
-
SSDEEP
98304:S6sv7VFsmntNEXhZbdk57kW8koKk7KJUkVjiOAS8QqeUYu:Fscm/uhZbiY8oN7KJbAS8/Yu
Static task
static1
Malware Config
Targets
-
-
Target
c0731d8ec97fffa773944e972a8645e63ac405e30f0df333fdb9974171ef9de3
-
Size
4.1MB
-
MD5
37ff9fd0f2db6a5abee70536962a1fd0
-
SHA1
5c1db2a9940767a7fc2b714d53fbf7eae1c810c9
-
SHA256
c0731d8ec97fffa773944e972a8645e63ac405e30f0df333fdb9974171ef9de3
-
SHA512
aca45d6fd80c3c4e7f27e01e09287abf4008ae4b9ca4959c67c7cdd10655c2e6611a93759bd96b4a29d23f2ed1d776532a76c63aa22b3dc34f8b16d4955bed7b
-
SSDEEP
98304:S6sv7VFsmntNEXhZbdk57kW8koKk7KJUkVjiOAS8QqeUYu:Fscm/uhZbiY8oN7KJbAS8/Yu
-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Executes dropped EXE
-
Modifies Windows Firewall
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-