General
-
Target
a447869d741851df40abfe5d72f39fdd3fdbd9c61d15b0145e33e9e5f4a53821
-
Size
4.0MB
-
Sample
230221-vf35rsfe73
-
MD5
0271bc5ecbfd6c9dd118c62d65d005eb
-
SHA1
aacc135d8b2ddaab9536dd767d9149da502d39f5
-
SHA256
a447869d741851df40abfe5d72f39fdd3fdbd9c61d15b0145e33e9e5f4a53821
-
SHA512
d792b5e3e5fb3ca3de39b53dc6a29eb74c7251378c9288ce1372362b4ab01d7c0cc026a94a3a22daea8608b41f20e61998c3907e506a44c99806b2133d855729
-
SSDEEP
98304:krwFQ7rbj38ljcSEC+VwnOxOrpk6M4EdwD:krwFQ3GcSAVgOxkOSD
Static task
static1
Malware Config
Targets
-
-
Target
a447869d741851df40abfe5d72f39fdd3fdbd9c61d15b0145e33e9e5f4a53821
-
Size
4.0MB
-
MD5
0271bc5ecbfd6c9dd118c62d65d005eb
-
SHA1
aacc135d8b2ddaab9536dd767d9149da502d39f5
-
SHA256
a447869d741851df40abfe5d72f39fdd3fdbd9c61d15b0145e33e9e5f4a53821
-
SHA512
d792b5e3e5fb3ca3de39b53dc6a29eb74c7251378c9288ce1372362b4ab01d7c0cc026a94a3a22daea8608b41f20e61998c3907e506a44c99806b2133d855729
-
SSDEEP
98304:krwFQ7rbj38ljcSEC+VwnOxOrpk6M4EdwD:krwFQ3GcSAVgOxkOSD
-
Glupteba payload
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-