General
-
Target
6751500c9034f5b236000981618bafbd654046197c801b709a9c48d3bb804d09
-
Size
4.1MB
-
Sample
221009-fnfbcagda3
-
MD5
54202c6eb4983f8662375d58a8a3f8fd
-
SHA1
ad7dacc9b2341c43849fa69a3a7826708f2cadb9
-
SHA256
6751500c9034f5b236000981618bafbd654046197c801b709a9c48d3bb804d09
-
SHA512
55f944daa03350546cdaa117241db2443184e3476a839806e1a116f88915ea5c0a34f1c33e0fb78280e9fa5692e7e6fb26ca41d70a18ee60014b2fafa0106a6f
-
SSDEEP
98304:8/ECSBuVcLzIPyZpr6S5DSs24JTPUcrJztx+hLWEhFFPa6xkvElCTg:GExIuEPgj5Gs2QlJpsjZl8+
Static task
static1
Malware Config
Targets
-
-
Target
6751500c9034f5b236000981618bafbd654046197c801b709a9c48d3bb804d09
-
Size
4.1MB
-
MD5
54202c6eb4983f8662375d58a8a3f8fd
-
SHA1
ad7dacc9b2341c43849fa69a3a7826708f2cadb9
-
SHA256
6751500c9034f5b236000981618bafbd654046197c801b709a9c48d3bb804d09
-
SHA512
55f944daa03350546cdaa117241db2443184e3476a839806e1a116f88915ea5c0a34f1c33e0fb78280e9fa5692e7e6fb26ca41d70a18ee60014b2fafa0106a6f
-
SSDEEP
98304:8/ECSBuVcLzIPyZpr6S5DSs24JTPUcrJztx+hLWEhFFPa6xkvElCTg:GExIuEPgj5Gs2QlJpsjZl8+
-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Executes dropped EXE
-
Modifies Windows Firewall
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-