General
-
Target
2b91ce8571d6ceb8f7e60ff0bf041c7ba7de196d6c7e1856ccaee2c33128fe38
-
Size
4.1MB
-
Sample
221004-21198sdbdp
-
MD5
3235e09f951b1991dd3935f5a29600f7
-
SHA1
56940be29ae63271fb71f9dc8bda3a2bbc93c712
-
SHA256
2b91ce8571d6ceb8f7e60ff0bf041c7ba7de196d6c7e1856ccaee2c33128fe38
-
SHA512
76b6f6ee29d703af006c20e40d9d3b978e073cb044c7b14f30060ec5db9b48a359aa105a88baa5377599837aef9ca0487060c74d16076162923bd24c65b85552
-
SSDEEP
98304:XcdeRIr4nukHCik85j+NwnM+q3fl3j9KyXCR+Pj0o9v62F0L:MKIr3kq85uJjJXspL
Static task
static1
Malware Config
Targets
-
-
Target
2b91ce8571d6ceb8f7e60ff0bf041c7ba7de196d6c7e1856ccaee2c33128fe38
-
Size
4.1MB
-
MD5
3235e09f951b1991dd3935f5a29600f7
-
SHA1
56940be29ae63271fb71f9dc8bda3a2bbc93c712
-
SHA256
2b91ce8571d6ceb8f7e60ff0bf041c7ba7de196d6c7e1856ccaee2c33128fe38
-
SHA512
76b6f6ee29d703af006c20e40d9d3b978e073cb044c7b14f30060ec5db9b48a359aa105a88baa5377599837aef9ca0487060c74d16076162923bd24c65b85552
-
SSDEEP
98304:XcdeRIr4nukHCik85j+NwnM+q3fl3j9KyXCR+Pj0o9v62F0L:MKIr3kq85uJjJXspL
-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Executes dropped EXE
-
Modifies Windows Firewall
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-