General
-
Target
572a8476ac0940c877c08db1d1876f6b9888526d7b40bb2dc3a8f2dd17207b39
-
Size
4.1MB
-
Sample
221007-xe3hysddbk
-
MD5
0740dc19888b59fb22155e64dab9889a
-
SHA1
6b0893d149f321f13b7bc3e4a419d7dbc6f51fd0
-
SHA256
572a8476ac0940c877c08db1d1876f6b9888526d7b40bb2dc3a8f2dd17207b39
-
SHA512
da3fda9a6434707a56afe9634d947f2c2f7484a022537af7d24e7a9a75dd38234ed282e30f646495cbb5fff30c947264612c14a9870de1cfd78bde77b985566a
-
SSDEEP
98304:WEW9IFZ4/OLSMogv1oK0cupMv+r4xcHIcJVlkVm3ow:CwZ4/Stv1pupM2XI47vx
Static task
static1
Malware Config
Targets
-
-
Target
572a8476ac0940c877c08db1d1876f6b9888526d7b40bb2dc3a8f2dd17207b39
-
Size
4.1MB
-
MD5
0740dc19888b59fb22155e64dab9889a
-
SHA1
6b0893d149f321f13b7bc3e4a419d7dbc6f51fd0
-
SHA256
572a8476ac0940c877c08db1d1876f6b9888526d7b40bb2dc3a8f2dd17207b39
-
SHA512
da3fda9a6434707a56afe9634d947f2c2f7484a022537af7d24e7a9a75dd38234ed282e30f646495cbb5fff30c947264612c14a9870de1cfd78bde77b985566a
-
SSDEEP
98304:WEW9IFZ4/OLSMogv1oK0cupMv+r4xcHIcJVlkVm3ow:CwZ4/Stv1pupM2XI47vx
-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Executes dropped EXE
-
Modifies Windows Firewall
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-