General
-
Target
ce1bbc33acbf387aea485a0885fd3aaa1bb9e71cf5d15c7993a68d5e0b26cbc7
-
Size
4.0MB
-
Sample
221124-gtsz3agd6t
-
MD5
2fa5451bcb62991d5f0463b749764b3f
-
SHA1
552c9ef95ef6e1000b035b0a17366aba79d7740a
-
SHA256
ce1bbc33acbf387aea485a0885fd3aaa1bb9e71cf5d15c7993a68d5e0b26cbc7
-
SHA512
659cfd34401d3417e2264e64b9d7208b17d3686e7c9f1e58ae680325defaaeb182e609c18f82c399b9f05ad28782f04ca6aaefe4465987852ac96c456aea799c
-
SSDEEP
98304:DnepuVtB2Q3eioxvwRiBHKIrgpEFM45A9WQDaQJzwXvxmC1+:Dnepm2QDOKigU75KWQdw5mCM
Static task
static1
Malware Config
Targets
-
-
Target
ce1bbc33acbf387aea485a0885fd3aaa1bb9e71cf5d15c7993a68d5e0b26cbc7
-
Size
4.0MB
-
MD5
2fa5451bcb62991d5f0463b749764b3f
-
SHA1
552c9ef95ef6e1000b035b0a17366aba79d7740a
-
SHA256
ce1bbc33acbf387aea485a0885fd3aaa1bb9e71cf5d15c7993a68d5e0b26cbc7
-
SHA512
659cfd34401d3417e2264e64b9d7208b17d3686e7c9f1e58ae680325defaaeb182e609c18f82c399b9f05ad28782f04ca6aaefe4465987852ac96c456aea799c
-
SSDEEP
98304:DnepuVtB2Q3eioxvwRiBHKIrgpEFM45A9WQDaQJzwXvxmC1+:Dnepm2QDOKigU75KWQdw5mCM
-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Executes dropped EXE
-
Modifies Windows Firewall
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-