General
-
Target
9183fe9769f2bf68409bdb02859958d9891b504850e3fed75111ad079771a3ea
-
Size
4.1MB
-
Sample
230204-pmbffagf31
-
MD5
4d3c0fa0a0e32e3e9df278f8d8d2bf3b
-
SHA1
7a7b408de078a3abddedeeec028b868d65395074
-
SHA256
9183fe9769f2bf68409bdb02859958d9891b504850e3fed75111ad079771a3ea
-
SHA512
50ec6d749a37daa41db6d936fad6f3117da20a9a531b72f33b205e08b35a566841080b526605297b8b1bc5cf914ff4c044b7ae0497b565f2d610dcac14931339
-
SSDEEP
98304:+8YbpkZf1JEeCq0fbawcb9V+ONBsQ2q3SAcnLJ2Dr8Pw:+gf1bCq0fblyHhBsPqoJcv
Static task
static1
Malware Config
Targets
-
-
Target
9183fe9769f2bf68409bdb02859958d9891b504850e3fed75111ad079771a3ea
-
Size
4.1MB
-
MD5
4d3c0fa0a0e32e3e9df278f8d8d2bf3b
-
SHA1
7a7b408de078a3abddedeeec028b868d65395074
-
SHA256
9183fe9769f2bf68409bdb02859958d9891b504850e3fed75111ad079771a3ea
-
SHA512
50ec6d749a37daa41db6d936fad6f3117da20a9a531b72f33b205e08b35a566841080b526605297b8b1bc5cf914ff4c044b7ae0497b565f2d610dcac14931339
-
SSDEEP
98304:+8YbpkZf1JEeCq0fbawcb9V+ONBsQ2q3SAcnLJ2Dr8Pw:+gf1bCq0fblyHhBsPqoJcv
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Legitimate hosting services abused for malware hosting/C2
-