General
-
Target
3c72c3d29b3d6bc84b42d9182675e309f7f56f99a50aae2a5ef565d412814042
-
Size
4.0MB
-
Sample
230203-q2zbgsfe75
-
MD5
fcf1381f4d46085997f5db0df66730fd
-
SHA1
3b7575065ce35a2f0212ab45049bc8674f35a51f
-
SHA256
3c72c3d29b3d6bc84b42d9182675e309f7f56f99a50aae2a5ef565d412814042
-
SHA512
5b85eb1e6c53c86d9bbb8cb99d1acc1f827c9d0a834a1e68cbf8baec6a93bd24ba77ac2f7408dac6b1730987621c8963bd790235991be5cba98b6131fff9aa41
-
SSDEEP
98304:8GSbJxmOgeiNNouGEFld6IhVtlgAQVM78udAg:87JxmFTAtEFCIzXeuSg
Static task
static1
Malware Config
Targets
-
-
Target
3c72c3d29b3d6bc84b42d9182675e309f7f56f99a50aae2a5ef565d412814042
-
Size
4.0MB
-
MD5
fcf1381f4d46085997f5db0df66730fd
-
SHA1
3b7575065ce35a2f0212ab45049bc8674f35a51f
-
SHA256
3c72c3d29b3d6bc84b42d9182675e309f7f56f99a50aae2a5ef565d412814042
-
SHA512
5b85eb1e6c53c86d9bbb8cb99d1acc1f827c9d0a834a1e68cbf8baec6a93bd24ba77ac2f7408dac6b1730987621c8963bd790235991be5cba98b6131fff9aa41
-
SSDEEP
98304:8GSbJxmOgeiNNouGEFld6IhVtlgAQVM78udAg:87JxmFTAtEFCIzXeuSg
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Legitimate hosting services abused for malware hosting/C2
-