General
-
Target
6fcc7af98705b8817e4b4bf9e0a0e3e72e042e0e39d6db363fcf0de89821b213
-
Size
4.0MB
-
Sample
230203-xr4xjsda6z
-
MD5
ddf8e620f41a247d9e8fb7dcdc06edb5
-
SHA1
5db327c28b3c0bb990e0750197ae0bacf1dee564
-
SHA256
6fcc7af98705b8817e4b4bf9e0a0e3e72e042e0e39d6db363fcf0de89821b213
-
SHA512
516719f264b7cac0d5041c847073a5cdf45de61e5cff8c418f4229eccc4f78982606bb2f5934cc9398a01c8d840842f23abefd94d84a6bc9c7061dd217829c3b
-
SSDEEP
98304:OC7ev/9edV/oLryVXQefuunuXYxWKBsjAb02m59IO:V7g9eP/GefuummLejA7m5mO
Static task
static1
Malware Config
Targets
-
-
Target
6fcc7af98705b8817e4b4bf9e0a0e3e72e042e0e39d6db363fcf0de89821b213
-
Size
4.0MB
-
MD5
ddf8e620f41a247d9e8fb7dcdc06edb5
-
SHA1
5db327c28b3c0bb990e0750197ae0bacf1dee564
-
SHA256
6fcc7af98705b8817e4b4bf9e0a0e3e72e042e0e39d6db363fcf0de89821b213
-
SHA512
516719f264b7cac0d5041c847073a5cdf45de61e5cff8c418f4229eccc4f78982606bb2f5934cc9398a01c8d840842f23abefd94d84a6bc9c7061dd217829c3b
-
SSDEEP
98304:OC7ev/9edV/oLryVXQefuunuXYxWKBsjAb02m59IO:V7g9eP/GefuummLejA7m5mO
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-