General
-
Target
bdaaea5cf67f4d3b174a3624a18ab43efd0735d88c42ce4900ee6daf25a5f7b5
-
Size
4.1MB
-
Sample
221007-pddt7scehl
-
MD5
08c116c1bbe0b040bdea78a0315141e4
-
SHA1
5f1710a2867de06c78bac0c302ce6e2f42a1535f
-
SHA256
bdaaea5cf67f4d3b174a3624a18ab43efd0735d88c42ce4900ee6daf25a5f7b5
-
SHA512
44527fb8a5cc84e1e11794550687d6e0ed30bcf00539d4cd16f48b9ed4024a5ba0cd289cfdfb564d3f56f73c4817b5987e61a6d4e7c75efaafcf1f20763bb2be
-
SSDEEP
98304:R/5ZsEwuOMSWzuRtFpnV9260dMm9IaUr1XUpG2cqHKnB:N8EhIRzp3DgMmEr1U3lqnB
Static task
static1
Malware Config
Targets
-
-
Target
bdaaea5cf67f4d3b174a3624a18ab43efd0735d88c42ce4900ee6daf25a5f7b5
-
Size
4.1MB
-
MD5
08c116c1bbe0b040bdea78a0315141e4
-
SHA1
5f1710a2867de06c78bac0c302ce6e2f42a1535f
-
SHA256
bdaaea5cf67f4d3b174a3624a18ab43efd0735d88c42ce4900ee6daf25a5f7b5
-
SHA512
44527fb8a5cc84e1e11794550687d6e0ed30bcf00539d4cd16f48b9ed4024a5ba0cd289cfdfb564d3f56f73c4817b5987e61a6d4e7c75efaafcf1f20763bb2be
-
SSDEEP
98304:R/5ZsEwuOMSWzuRtFpnV9260dMm9IaUr1XUpG2cqHKnB:N8EhIRzp3DgMmEr1U3lqnB
-
Executes dropped EXE
-
Modifies Windows Firewall
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of SetThreadContext
-