General
-
Target
bf3dd84f92c41c8ce7426e082ab44dd8c905a1ac9686b9ee9e3368a2b4a32cca
-
Size
4.0MB
-
Sample
230131-a2f7xafa8w
-
MD5
0f9c87820e4a3629c4a23147a35322eb
-
SHA1
904e6875d848d2b1d5fc3026bd2047f124a97326
-
SHA256
bf3dd84f92c41c8ce7426e082ab44dd8c905a1ac9686b9ee9e3368a2b4a32cca
-
SHA512
6cad41a9c567d810cac4c4087c95e10a71244ab3b1c0daeba45652ef626dac43bca5b9601cd77635dc72bf5e78b821ee0585f3aadbef683e3a6a2801ee3c25d6
-
SSDEEP
98304:6BYpam/Ie00cDiD6QYLRgoVy7UVf/QUYmY6agnp0+ka+Tm:2YpaT309Ylgp75z8/
Static task
static1
Malware Config
Targets
-
-
Target
bf3dd84f92c41c8ce7426e082ab44dd8c905a1ac9686b9ee9e3368a2b4a32cca
-
Size
4.0MB
-
MD5
0f9c87820e4a3629c4a23147a35322eb
-
SHA1
904e6875d848d2b1d5fc3026bd2047f124a97326
-
SHA256
bf3dd84f92c41c8ce7426e082ab44dd8c905a1ac9686b9ee9e3368a2b4a32cca
-
SHA512
6cad41a9c567d810cac4c4087c95e10a71244ab3b1c0daeba45652ef626dac43bca5b9601cd77635dc72bf5e78b821ee0585f3aadbef683e3a6a2801ee3c25d6
-
SSDEEP
98304:6BYpam/Ie00cDiD6QYLRgoVy7UVf/QUYmY6agnp0+ka+Tm:2YpaT309Ylgp75z8/
-
Executes dropped EXE
-
Modifies Windows Firewall
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Legitimate hosting services abused for malware hosting/C2
-