General
-
Target
ffd369555e74df453345aa1fd4b20c400d25d248d69474f1a4f7ad4c68858060
-
Size
4.1MB
-
Sample
221009-p6grkahbdp
-
MD5
4e0d3da3241f86736c607f9804df930c
-
SHA1
70c61a23d38c204e94cab31ff2e18fe98353ed9b
-
SHA256
ffd369555e74df453345aa1fd4b20c400d25d248d69474f1a4f7ad4c68858060
-
SHA512
65133cbf1a21440541ff06acf54126203f8b9cae98378f0687ab66e23f7a781c938950f02500b7bb0cf05afb80e8a5907df59091c2a9b2de4c574a8dedd350b5
-
SSDEEP
98304:TddLOTeLcbnpUQEIRj4p+d9B87jxcjHQZyxOPg:BDcbq9IKwY6HQZ7g
Static task
static1
Malware Config
Targets
-
-
Target
ffd369555e74df453345aa1fd4b20c400d25d248d69474f1a4f7ad4c68858060
-
Size
4.1MB
-
MD5
4e0d3da3241f86736c607f9804df930c
-
SHA1
70c61a23d38c204e94cab31ff2e18fe98353ed9b
-
SHA256
ffd369555e74df453345aa1fd4b20c400d25d248d69474f1a4f7ad4c68858060
-
SHA512
65133cbf1a21440541ff06acf54126203f8b9cae98378f0687ab66e23f7a781c938950f02500b7bb0cf05afb80e8a5907df59091c2a9b2de4c574a8dedd350b5
-
SSDEEP
98304:TddLOTeLcbnpUQEIRj4p+d9B87jxcjHQZyxOPg:BDcbq9IKwY6HQZ7g
-
Executes dropped EXE
-
Modifies Windows Firewall
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of SetThreadContext
-