General
-
Target
084cba3423aec90ec6d52b5fe7f1c96b7da174760d327403a367d039853656fa
-
Size
4.1MB
-
Sample
221008-tk5cysfbam
-
MD5
f285604c074a4e95a6d1a891abf9c327
-
SHA1
bb0e4dc4a0968aac94bf5a510f8813ad8d37c625
-
SHA256
084cba3423aec90ec6d52b5fe7f1c96b7da174760d327403a367d039853656fa
-
SHA512
123511d495c22c924899d21034dc6c1888380a6a68a9b57698c7795e5e0cdf21753710278edae7207544f26d3b44f4df697530147fc57adadc29827cf538bdaf
-
SSDEEP
98304:8GBk6cxiUX49zYOLkPEZT8gC8yxvZxmgcIil+S0qtJGc7+:nC49zYOL9ZT8gQxSViSxt/7+
Static task
static1
Malware Config
Targets
-
-
Target
084cba3423aec90ec6d52b5fe7f1c96b7da174760d327403a367d039853656fa
-
Size
4.1MB
-
MD5
f285604c074a4e95a6d1a891abf9c327
-
SHA1
bb0e4dc4a0968aac94bf5a510f8813ad8d37c625
-
SHA256
084cba3423aec90ec6d52b5fe7f1c96b7da174760d327403a367d039853656fa
-
SHA512
123511d495c22c924899d21034dc6c1888380a6a68a9b57698c7795e5e0cdf21753710278edae7207544f26d3b44f4df697530147fc57adadc29827cf538bdaf
-
SSDEEP
98304:8GBk6cxiUX49zYOLkPEZT8gC8yxvZxmgcIil+S0qtJGc7+:nC49zYOL9ZT8gQxSViSxt/7+
-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Executes dropped EXE
-
Modifies Windows Firewall
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-