General
-
Target
40fe9954d4261a04e4662b49fc0669d1f158bfd96ef791a49051da9476a17f08
-
Size
4.1MB
-
Sample
221007-lq8zbsccfm
-
MD5
bcbad495ac50fd7daf69698f24b38e3d
-
SHA1
741687a0569544b0d7830bb92504da8ea3e7b8ea
-
SHA256
40fe9954d4261a04e4662b49fc0669d1f158bfd96ef791a49051da9476a17f08
-
SHA512
58a6df6a362bad9514d1666bec7a3545ca4d04e777661b6e2063755a4e2101cbbbe0b5a1f450fd15c8e2a371eb4fc708814261d68f31449a21c8a271c84bda4f
-
SSDEEP
98304:4kKVi+XolpTgfMr1O13d9MOriHrOfQe2v0L/Zi97e3ep5:sixlhH1+d9HiHrOfQe2c7c97eOp5
Static task
static1
Malware Config
Targets
-
-
Target
40fe9954d4261a04e4662b49fc0669d1f158bfd96ef791a49051da9476a17f08
-
Size
4.1MB
-
MD5
bcbad495ac50fd7daf69698f24b38e3d
-
SHA1
741687a0569544b0d7830bb92504da8ea3e7b8ea
-
SHA256
40fe9954d4261a04e4662b49fc0669d1f158bfd96ef791a49051da9476a17f08
-
SHA512
58a6df6a362bad9514d1666bec7a3545ca4d04e777661b6e2063755a4e2101cbbbe0b5a1f450fd15c8e2a371eb4fc708814261d68f31449a21c8a271c84bda4f
-
SSDEEP
98304:4kKVi+XolpTgfMr1O13d9MOriHrOfQe2v0L/Zi97e3ep5:sixlhH1+d9HiHrOfQe2c7c97eOp5
-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Executes dropped EXE
-
Modifies Windows Firewall
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-