General
-
Target
7b54e3fbfeb7238f60e3d1d2649aed347f28a77dabcfee0811eee6608e659fbb
-
Size
4.1MB
-
Sample
221005-kbbvlsdga5
-
MD5
1ecc5a0d190104170a61f455054313e5
-
SHA1
342f6baa5798c47f6e47d356f3d0072573ae0272
-
SHA256
7b54e3fbfeb7238f60e3d1d2649aed347f28a77dabcfee0811eee6608e659fbb
-
SHA512
b29cd31b174f69adacc958cf2708bcf77ace0f784e3a84e6be1bf5ccef4d293b1fc56f257b91174b5086cfdc92ad2057f12654f8237ea28f09f431a31db9cf0c
-
SSDEEP
98304:DGr5XsjgbzzDKUVPIRAXxDH5ubxbg//6aKXIPUYM15t9WAYxcCC:irNsWzpNIkxDH5YM/SaK0w5DYJC
Static task
static1
Malware Config
Targets
-
-
Target
7b54e3fbfeb7238f60e3d1d2649aed347f28a77dabcfee0811eee6608e659fbb
-
Size
4.1MB
-
MD5
1ecc5a0d190104170a61f455054313e5
-
SHA1
342f6baa5798c47f6e47d356f3d0072573ae0272
-
SHA256
7b54e3fbfeb7238f60e3d1d2649aed347f28a77dabcfee0811eee6608e659fbb
-
SHA512
b29cd31b174f69adacc958cf2708bcf77ace0f784e3a84e6be1bf5ccef4d293b1fc56f257b91174b5086cfdc92ad2057f12654f8237ea28f09f431a31db9cf0c
-
SSDEEP
98304:DGr5XsjgbzzDKUVPIRAXxDH5ubxbg//6aKXIPUYM15t9WAYxcCC:irNsWzpNIkxDH5YM/SaK0w5DYJC
-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Executes dropped EXE
-
Modifies Windows Firewall
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-