General
-
Target
86aa504f79df7ba09776fe1072e4b1672fa4b23988a88c9c3d311cb53d0b9f9b
-
Size
4.1MB
-
Sample
230131-zr3qlacc5s
-
MD5
4daa42a8bc4923fccf4be699d6870027
-
SHA1
acb0a305bd2959bda4fcde7dfb389d248e291115
-
SHA256
86aa504f79df7ba09776fe1072e4b1672fa4b23988a88c9c3d311cb53d0b9f9b
-
SHA512
b90131f310bc6dea7a5a4cdcf2550c0b7860b1463066ea28df2b2c8aab187d0bf1a0d6f65f4b52687caf0289fa597a1828ebdd64bcfb9ea475d0d3a8dc48d9ee
-
SSDEEP
98304:T0y0T34jPqe76AqYiv3nwU59HFBsbXEX7+AZCZV6PW66E:YD32XE3dJFqbXoCD6P3
Static task
static1
Malware Config
Targets
-
-
Target
86aa504f79df7ba09776fe1072e4b1672fa4b23988a88c9c3d311cb53d0b9f9b
-
Size
4.1MB
-
MD5
4daa42a8bc4923fccf4be699d6870027
-
SHA1
acb0a305bd2959bda4fcde7dfb389d248e291115
-
SHA256
86aa504f79df7ba09776fe1072e4b1672fa4b23988a88c9c3d311cb53d0b9f9b
-
SHA512
b90131f310bc6dea7a5a4cdcf2550c0b7860b1463066ea28df2b2c8aab187d0bf1a0d6f65f4b52687caf0289fa597a1828ebdd64bcfb9ea475d0d3a8dc48d9ee
-
SSDEEP
98304:T0y0T34jPqe76AqYiv3nwU59HFBsbXEX7+AZCZV6PW66E:YD32XE3dJFqbXoCD6P3
-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Executes dropped EXE
-
Modifies Windows Firewall
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-