General
-
Target
9918a632dd77fae0a38569f55bbd708b0aeaa32c305956537c367f046dceb738
-
Size
4.1MB
-
Sample
221009-henx8sgegj
-
MD5
f8ba7728af8bae1f0f029899fa0ea42b
-
SHA1
3d3f739162513bfda07676ea1fc7aec95fc24ef1
-
SHA256
9918a632dd77fae0a38569f55bbd708b0aeaa32c305956537c367f046dceb738
-
SHA512
b7cf6c21b819b967415f3718b088394aa2999a3fa5c0ad21e36764192d570763c7dd1a52cc61b0ba79548994f5e6df67d2d7a872d7de5a686344af881bafd19c
-
SSDEEP
98304:XsagbobOyzjAJUIFRhfcPlGHp1SNXJ4u2WxCf9ZL5I5evTfx:8agboBzjAa2RQeWJJ4uxCf9ZLuevTfx
Static task
static1
Malware Config
Targets
-
-
Target
9918a632dd77fae0a38569f55bbd708b0aeaa32c305956537c367f046dceb738
-
Size
4.1MB
-
MD5
f8ba7728af8bae1f0f029899fa0ea42b
-
SHA1
3d3f739162513bfda07676ea1fc7aec95fc24ef1
-
SHA256
9918a632dd77fae0a38569f55bbd708b0aeaa32c305956537c367f046dceb738
-
SHA512
b7cf6c21b819b967415f3718b088394aa2999a3fa5c0ad21e36764192d570763c7dd1a52cc61b0ba79548994f5e6df67d2d7a872d7de5a686344af881bafd19c
-
SSDEEP
98304:XsagbobOyzjAJUIFRhfcPlGHp1SNXJ4u2WxCf9ZL5I5evTfx:8agboBzjAa2RQeWJJ4uxCf9ZLuevTfx
-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Executes dropped EXE
-
Modifies Windows Firewall
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-