General
-
Target
Setup.exe
-
Size
156.7MB
-
Sample
230211-w5zdjseh68
-
MD5
4e1786a19e652aff0904d0f4978fe853
-
SHA1
6504460ad1d4853a8e2574df30095b4da14e582a
-
SHA256
f0967740fe5c43bcc16f075fcffe700c2225e2dfe7f0b18493c94b2ed0d82720
-
SHA512
e7456a2aab23b19f1ba730818eea185974c15ae56af9a2392b73247aaf7d3a0207784de7b00039a402fe901fb726d8b47160b68eb7bdc1a8f10456ad17f97fee
-
SSDEEP
3145728:2dlkDfLV9N3SMST8xSUUrXCziv7b69KUW78wndDwFtXCbv9ECR7ZA:2dmrN33RxXQX/TrUWbd+Avime
Static task
static1
Malware Config
Targets
-
-
Target
Setup.exe
-
Size
156.7MB
-
MD5
4e1786a19e652aff0904d0f4978fe853
-
SHA1
6504460ad1d4853a8e2574df30095b4da14e582a
-
SHA256
f0967740fe5c43bcc16f075fcffe700c2225e2dfe7f0b18493c94b2ed0d82720
-
SHA512
e7456a2aab23b19f1ba730818eea185974c15ae56af9a2392b73247aaf7d3a0207784de7b00039a402fe901fb726d8b47160b68eb7bdc1a8f10456ad17f97fee
-
SSDEEP
3145728:2dlkDfLV9N3SMST8xSUUrXCziv7b69KUW78wndDwFtXCbv9ECR7ZA:2dmrN33RxXQX/TrUWbd+Avime
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops desktop.ini file(s)
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-