General
-
Target
41e59a60716a1da5b44869ebe27d6c0b2ed289930dd3adc622cb3ae314a43df2
-
Size
272KB
-
Sample
221123-vmyhvshd99
-
MD5
3695b3c1e7fa3e8b81f8bb82e655ba41
-
SHA1
0ad37edf83255c34b89fab0aaa112e9bb2967cc4
-
SHA256
41e59a60716a1da5b44869ebe27d6c0b2ed289930dd3adc622cb3ae314a43df2
-
SHA512
82164d394342b022605e7246dd2d9efe0266829dc7299d004c1051eba3fb5bd9d744d220f0b1a1adf79e244535d401f565855c3d25cdd9cfb59ba2b46120f142
-
SSDEEP
6144:9PLkVO8A1X2og0tEHH45Y0KTIVaTycTVDNe4jAfQP2JqjsR:qMJ1X2og0MHGKT3RRwcAf22EQR
Behavioral task
behavioral1
Sample
41e59a60716a1da5b44869ebe27d6c0b2ed289930dd3adc622cb3ae314a43df2.exe
Resource
win7-20220812-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
Targets
-
-
Target
41e59a60716a1da5b44869ebe27d6c0b2ed289930dd3adc622cb3ae314a43df2
-
Size
272KB
-
MD5
3695b3c1e7fa3e8b81f8bb82e655ba41
-
SHA1
0ad37edf83255c34b89fab0aaa112e9bb2967cc4
-
SHA256
41e59a60716a1da5b44869ebe27d6c0b2ed289930dd3adc622cb3ae314a43df2
-
SHA512
82164d394342b022605e7246dd2d9efe0266829dc7299d004c1051eba3fb5bd9d744d220f0b1a1adf79e244535d401f565855c3d25cdd9cfb59ba2b46120f142
-
SSDEEP
6144:9PLkVO8A1X2og0tEHH45Y0KTIVaTycTVDNe4jAfQP2JqjsR:qMJ1X2og0MHGKT3RRwcAf22EQR
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Modifies Windows Firewall
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
-