General
-
Target
7eba62efc40ac8952186d7017acfc81b01a229d9ef8a6d4d44faec43b0065727
-
Size
4.1MB
-
Sample
221008-wk361afbd6
-
MD5
1601bc9771e772c2e53d9c1a48c8c6f7
-
SHA1
09cd5cb61d59b813b7da40305fe10c54c1e976fb
-
SHA256
7eba62efc40ac8952186d7017acfc81b01a229d9ef8a6d4d44faec43b0065727
-
SHA512
0dc79b36e318d4d974e3eb59e895b052cbff5fdd2c0f227c9999e50b6ece4ac4f7931d8b60cfcc8e3df7ddadd2b7731a8bf489e032ef6a925daeaebf1dfc0f59
-
SSDEEP
98304:hDBKobYtvHSyPhiROsmpQqjan1sMzj1wAq4doQMH4uQ8xqv0RGCh:fvbYpyygRrmpEsMzjbOHRQ8w2Ge
Static task
static1
Malware Config
Targets
-
-
Target
7eba62efc40ac8952186d7017acfc81b01a229d9ef8a6d4d44faec43b0065727
-
Size
4.1MB
-
MD5
1601bc9771e772c2e53d9c1a48c8c6f7
-
SHA1
09cd5cb61d59b813b7da40305fe10c54c1e976fb
-
SHA256
7eba62efc40ac8952186d7017acfc81b01a229d9ef8a6d4d44faec43b0065727
-
SHA512
0dc79b36e318d4d974e3eb59e895b052cbff5fdd2c0f227c9999e50b6ece4ac4f7931d8b60cfcc8e3df7ddadd2b7731a8bf489e032ef6a925daeaebf1dfc0f59
-
SSDEEP
98304:hDBKobYtvHSyPhiROsmpQqjan1sMzj1wAq4doQMH4uQ8xqv0RGCh:fvbYpyygRrmpEsMzjbOHRQ8w2Ge
-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Executes dropped EXE
-
Modifies Windows Firewall
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-