General
-
Target
ddc895784aefd374accc66e1f83c37e218336e0372022014ddd6c7785f9b9c39
-
Size
4.1MB
-
Sample
230202-m5ppnsfh27
-
MD5
6f4963a6a706c81f9edbb0bc7ad34ed6
-
SHA1
b3a308f0ecf51aef5d8d874af1602d114d143995
-
SHA256
ddc895784aefd374accc66e1f83c37e218336e0372022014ddd6c7785f9b9c39
-
SHA512
9ba9eb4bda18d78af56623bef6c35a550bb5218b27e37df9ddf513f76edcbcbe6bf1022580eb5f7e09e6b5a9f69c710e0509c82b143af3a159de06ce7694550d
-
SSDEEP
98304:v6s7eYqXEy+L60B3c2olZONxtlg6KFySws2pMtBO8onbqb7d:vf7cXEjfsxlZOBlg6KFT52piQNnMd
Static task
static1
Malware Config
Targets
-
-
Target
ddc895784aefd374accc66e1f83c37e218336e0372022014ddd6c7785f9b9c39
-
Size
4.1MB
-
MD5
6f4963a6a706c81f9edbb0bc7ad34ed6
-
SHA1
b3a308f0ecf51aef5d8d874af1602d114d143995
-
SHA256
ddc895784aefd374accc66e1f83c37e218336e0372022014ddd6c7785f9b9c39
-
SHA512
9ba9eb4bda18d78af56623bef6c35a550bb5218b27e37df9ddf513f76edcbcbe6bf1022580eb5f7e09e6b5a9f69c710e0509c82b143af3a159de06ce7694550d
-
SSDEEP
98304:v6s7eYqXEy+L60B3c2olZONxtlg6KFySws2pMtBO8onbqb7d:vf7cXEjfsxlZOBlg6KFT52piQNnMd
-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Executes dropped EXE
-
Modifies Windows Firewall
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-