General
-
Target
7bc7c965fbe72bcd3bc68232fb4dc48cdf28bd3f34b37faaf9066b876ce5b737
-
Size
4.1MB
-
Sample
221011-j5vddadhbl
-
MD5
d47dc808890557b6d1533f58e3c9ed3c
-
SHA1
ef49d5ef60f8bbb454826ed8a2a009596517b26d
-
SHA256
7bc7c965fbe72bcd3bc68232fb4dc48cdf28bd3f34b37faaf9066b876ce5b737
-
SHA512
a8e744c05c92be825c325b6b6a2619d605512cf15be97c1407814c0f387ffba018d563f43d668bd802eff96d92f0ba1adac7fc53fa4b9932e26ebd43232cd237
-
SSDEEP
98304:nLH7TMkgqMU6wIT/nVNRdROoc8p29YGf8bJH:1MUbG/VNRdpWv8tH
Static task
static1
Malware Config
Targets
-
-
Target
7bc7c965fbe72bcd3bc68232fb4dc48cdf28bd3f34b37faaf9066b876ce5b737
-
Size
4.1MB
-
MD5
d47dc808890557b6d1533f58e3c9ed3c
-
SHA1
ef49d5ef60f8bbb454826ed8a2a009596517b26d
-
SHA256
7bc7c965fbe72bcd3bc68232fb4dc48cdf28bd3f34b37faaf9066b876ce5b737
-
SHA512
a8e744c05c92be825c325b6b6a2619d605512cf15be97c1407814c0f387ffba018d563f43d668bd802eff96d92f0ba1adac7fc53fa4b9932e26ebd43232cd237
-
SSDEEP
98304:nLH7TMkgqMU6wIT/nVNRdROoc8p29YGf8bJH:1MUbG/VNRdpWv8tH
-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Executes dropped EXE
-
Modifies Windows Firewall
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-