General
-
Target
c9d0354e9b245c2240bcf18c03b98b4d83f9370539a74c09b079c5a04069148b
-
Size
4.0MB
-
Sample
221130-bfj74sdh72
-
MD5
523bc62208a9c493d9d9ed1b271a68aa
-
SHA1
865818ce4f4bd905303683b842eca464b0908905
-
SHA256
c9d0354e9b245c2240bcf18c03b98b4d83f9370539a74c09b079c5a04069148b
-
SHA512
289d338593c6e8ed8b359e6879190377c6eee3ebdff3ffab00b1f1078765806cc7a68ae050090bc2a30dec0b6052cf6539d4b09302199b2029cc1d3a267a93da
-
SSDEEP
98304:0gjjL01Lpqs3ZPf4L9iN73Wkv773s4xKrOOfRcOWJ:06g193PfPoU773sYJgRcOWJ
Static task
static1
Malware Config
Targets
-
-
Target
c9d0354e9b245c2240bcf18c03b98b4d83f9370539a74c09b079c5a04069148b
-
Size
4.0MB
-
MD5
523bc62208a9c493d9d9ed1b271a68aa
-
SHA1
865818ce4f4bd905303683b842eca464b0908905
-
SHA256
c9d0354e9b245c2240bcf18c03b98b4d83f9370539a74c09b079c5a04069148b
-
SHA512
289d338593c6e8ed8b359e6879190377c6eee3ebdff3ffab00b1f1078765806cc7a68ae050090bc2a30dec0b6052cf6539d4b09302199b2029cc1d3a267a93da
-
SSDEEP
98304:0gjjL01Lpqs3ZPf4L9iN73Wkv773s4xKrOOfRcOWJ:06g193PfPoU773sYJgRcOWJ
-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Executes dropped EXE
-
Modifies Windows Firewall
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-