General
-
Target
39ebe4a8824982f8c863cb7a16be137cd410a47a54b85b32ed890398e0f2791f
-
Size
4.0MB
-
Sample
221129-t9jsjsfg45
-
MD5
a9615154b19fa792f8d4fb8f6f976c34
-
SHA1
7d07be2aec378af2143285ec4c077bfa0cd348d9
-
SHA256
39ebe4a8824982f8c863cb7a16be137cd410a47a54b85b32ed890398e0f2791f
-
SHA512
235edd6d4c032a74ece73e0e7bb5632cf512bab513ee8d6acaaada89e15888357a774a1d8a2eb0c418e7058d08784f4849b58d8f7c72b03d24c7d1d789f5470f
-
SSDEEP
98304:NCOb6eX8O55MtK/D8z1KHchr3tRqHoJ2SpiZ+Hp3aL:8kX5v/LchjtRqH4piZMaL
Static task
static1
Malware Config
Targets
-
-
Target
39ebe4a8824982f8c863cb7a16be137cd410a47a54b85b32ed890398e0f2791f
-
Size
4.0MB
-
MD5
a9615154b19fa792f8d4fb8f6f976c34
-
SHA1
7d07be2aec378af2143285ec4c077bfa0cd348d9
-
SHA256
39ebe4a8824982f8c863cb7a16be137cd410a47a54b85b32ed890398e0f2791f
-
SHA512
235edd6d4c032a74ece73e0e7bb5632cf512bab513ee8d6acaaada89e15888357a774a1d8a2eb0c418e7058d08784f4849b58d8f7c72b03d24c7d1d789f5470f
-
SSDEEP
98304:NCOb6eX8O55MtK/D8z1KHchr3tRqHoJ2SpiZ+Hp3aL:8kX5v/LchjtRqH4piZMaL
-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Executes dropped EXE
-
Modifies Windows Firewall
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-