General
-
Target
cca85dbafed4a3a52285ff8d3fb742c881b9525a7bc3b76d616e6d2937d69998
-
Size
4.0MB
-
Sample
230203-mymxhaee82
-
MD5
f5d30064689da3a5b146a70da354e3a4
-
SHA1
4a01865746f6d667fccb3a8bf7af790d3dea9a9a
-
SHA256
cca85dbafed4a3a52285ff8d3fb742c881b9525a7bc3b76d616e6d2937d69998
-
SHA512
f196a429c7e28ed6090b1f5488768960ba7a12c8e9c0a0c6d4ae7e4fe95290c6f67b9fea0c30082c284552bf7b3dca93ee2815c6ca516780ffcd409bc35fa457
-
SSDEEP
98304:VngOgOkztnzaCKoI2A6VV3O3Avalm32Sg9kyjU8sp3si5GZ:VnpgOkzVzPbA6VtKJlkSU89r
Static task
static1
Malware Config
Targets
-
-
Target
cca85dbafed4a3a52285ff8d3fb742c881b9525a7bc3b76d616e6d2937d69998
-
Size
4.0MB
-
MD5
f5d30064689da3a5b146a70da354e3a4
-
SHA1
4a01865746f6d667fccb3a8bf7af790d3dea9a9a
-
SHA256
cca85dbafed4a3a52285ff8d3fb742c881b9525a7bc3b76d616e6d2937d69998
-
SHA512
f196a429c7e28ed6090b1f5488768960ba7a12c8e9c0a0c6d4ae7e4fe95290c6f67b9fea0c30082c284552bf7b3dca93ee2815c6ca516780ffcd409bc35fa457
-
SSDEEP
98304:VngOgOkztnzaCKoI2A6VV3O3Avalm32Sg9kyjU8sp3si5GZ:VnpgOkzVzPbA6VtKJlkSU89r
-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-