General
-
Target
b11bdda8d78c3f118d599144d70add82b817aeabc4caa1ff04fab8b186e01d1e
-
Size
4.1MB
-
Sample
221005-ljc83sdhd8
-
MD5
437c917cd70d172b862caeaba10e08f9
-
SHA1
c25fe8e5df325ac83073ee542b1964204d37a800
-
SHA256
b11bdda8d78c3f118d599144d70add82b817aeabc4caa1ff04fab8b186e01d1e
-
SHA512
ecd15b7293bcb867e4ffc32d736c6f02b8792a32754cfd5b2acb6989ac924434405f5fecb1d403c42bb65e650a4299905b560c0edc7aa31564dc1f94898bb748
-
SSDEEP
98304:kJRbHn54cwXt6mvPsbQrsq4cDE6UhAr/5Q74rXb:ORbH3wXcm/r34GjUhAOKL
Static task
static1
Malware Config
Targets
-
-
Target
b11bdda8d78c3f118d599144d70add82b817aeabc4caa1ff04fab8b186e01d1e
-
Size
4.1MB
-
MD5
437c917cd70d172b862caeaba10e08f9
-
SHA1
c25fe8e5df325ac83073ee542b1964204d37a800
-
SHA256
b11bdda8d78c3f118d599144d70add82b817aeabc4caa1ff04fab8b186e01d1e
-
SHA512
ecd15b7293bcb867e4ffc32d736c6f02b8792a32754cfd5b2acb6989ac924434405f5fecb1d403c42bb65e650a4299905b560c0edc7aa31564dc1f94898bb748
-
SSDEEP
98304:kJRbHn54cwXt6mvPsbQrsq4cDE6UhAr/5Q74rXb:ORbH3wXcm/r34GjUhAOKL
-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Executes dropped EXE
-
Modifies Windows Firewall
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-