General
-
Target
dde4fcfa18001283df51d8d7f9ef0935150eba831f3771c07fe4ecf598f2fd7b
-
Size
4.1MB
-
Sample
230128-an8d8sde88
-
MD5
bd1549cdb1b7650fb4615ecc25bc93f4
-
SHA1
c8d4bf93a17d304c2730f57052f62070ed6b7310
-
SHA256
dde4fcfa18001283df51d8d7f9ef0935150eba831f3771c07fe4ecf598f2fd7b
-
SHA512
e653b693316d3487cad01e616b4b47c5fe4627be108e95cc0245882e31288d1a265fc1f49693c226051b1d62248b244cb9c76eadce4e6c840eae74d11c087a2d
-
SSDEEP
98304:H5tCfexSqFjY6mzBi16X+LmEVaMYXj3VvVC:ufeXdY6mzBiQrC
Static task
static1
Malware Config
Targets
-
-
Target
dde4fcfa18001283df51d8d7f9ef0935150eba831f3771c07fe4ecf598f2fd7b
-
Size
4.1MB
-
MD5
bd1549cdb1b7650fb4615ecc25bc93f4
-
SHA1
c8d4bf93a17d304c2730f57052f62070ed6b7310
-
SHA256
dde4fcfa18001283df51d8d7f9ef0935150eba831f3771c07fe4ecf598f2fd7b
-
SHA512
e653b693316d3487cad01e616b4b47c5fe4627be108e95cc0245882e31288d1a265fc1f49693c226051b1d62248b244cb9c76eadce4e6c840eae74d11c087a2d
-
SSDEEP
98304:H5tCfexSqFjY6mzBi16X+LmEVaMYXj3VvVC:ufeXdY6mzBiQrC
-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Executes dropped EXE
-
Modifies Windows Firewall
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-