General
-
Target
a3d49bb9d44da26bc5c3650be6b3663429cc7bd6e02d0483994f5c5a06949002
-
Size
4.1MB
-
Sample
221008-de6e3aebgj
-
MD5
2341776828b862034d3d4c9b23b40b29
-
SHA1
7f7ab6d3197cfec74dccf6f352107a2685e37d60
-
SHA256
a3d49bb9d44da26bc5c3650be6b3663429cc7bd6e02d0483994f5c5a06949002
-
SHA512
8c5991c9fc17ef0b97d984c4d18d23f5821d1fccb941a3fd81b1bac12690e589984a6e5ed8cc36c38fa13da6e47d4220bc97f84d6e6a17e7ba372f6848c7a661
-
SSDEEP
49152:xlBep/VOTg1p7RXKO63AZ15KC+5WvEt6b/ZuM7XJUEM/iIgO2i5KB8vKMW+BXUEW:xveFPdyQZ1oKN7MMDJw3vKh+XcPCZK
Static task
static1
Malware Config
Targets
-
-
Target
a3d49bb9d44da26bc5c3650be6b3663429cc7bd6e02d0483994f5c5a06949002
-
Size
4.1MB
-
MD5
2341776828b862034d3d4c9b23b40b29
-
SHA1
7f7ab6d3197cfec74dccf6f352107a2685e37d60
-
SHA256
a3d49bb9d44da26bc5c3650be6b3663429cc7bd6e02d0483994f5c5a06949002
-
SHA512
8c5991c9fc17ef0b97d984c4d18d23f5821d1fccb941a3fd81b1bac12690e589984a6e5ed8cc36c38fa13da6e47d4220bc97f84d6e6a17e7ba372f6848c7a661
-
SSDEEP
49152:xlBep/VOTg1p7RXKO63AZ15KC+5WvEt6b/ZuM7XJUEM/iIgO2i5KB8vKMW+BXUEW:xveFPdyQZ1oKN7MMDJw3vKh+XcPCZK
-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Executes dropped EXE
-
Modifies Windows Firewall
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-