General
-
Target
a8734ccc9b5893cf9d19004374c20a3986bd19f2ed21cbbff38f6d3fcde65061
-
Size
4.0MB
-
Sample
221130-k9df4aaf9y
-
MD5
1cdd357e6b017c303d8e3439cf476eb8
-
SHA1
509967f532bb64e5a0811a5100da9f5f6b045277
-
SHA256
a8734ccc9b5893cf9d19004374c20a3986bd19f2ed21cbbff38f6d3fcde65061
-
SHA512
1558724fd7203b3ac35176edef3ab2d99c9aa5bb6f21eb8f104afd5541d13e606615f3cf4d826c8390b86fa3b5d6fa1f17d2fbe6f778d74a2ddfde3bcad07b1a
-
SSDEEP
98304:WlNSEdEnv+/4chZZ/0P0wZh585XuddVVurg5a1OEIop:SxdEv+/4wZJEbZkudAc5axHp
Static task
static1
Malware Config
Targets
-
-
Target
a8734ccc9b5893cf9d19004374c20a3986bd19f2ed21cbbff38f6d3fcde65061
-
Size
4.0MB
-
MD5
1cdd357e6b017c303d8e3439cf476eb8
-
SHA1
509967f532bb64e5a0811a5100da9f5f6b045277
-
SHA256
a8734ccc9b5893cf9d19004374c20a3986bd19f2ed21cbbff38f6d3fcde65061
-
SHA512
1558724fd7203b3ac35176edef3ab2d99c9aa5bb6f21eb8f104afd5541d13e606615f3cf4d826c8390b86fa3b5d6fa1f17d2fbe6f778d74a2ddfde3bcad07b1a
-
SSDEEP
98304:WlNSEdEnv+/4chZZ/0P0wZh585XuddVVurg5a1OEIop:SxdEv+/4wZJEbZkudAc5axHp
-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Executes dropped EXE
-
Modifies Windows Firewall
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-