General
-
Target
b99cc0c11286366fb6d9b27e695b322a701a87f179ceeca0b39cb1bf763e0409
-
Size
4.1MB
-
Sample
230326-t797qahc44
-
MD5
6f26d81c10d8abd3bd62783915f0cfbf
-
SHA1
2943166a08cb156c155d4314b43d377681474bbd
-
SHA256
b99cc0c11286366fb6d9b27e695b322a701a87f179ceeca0b39cb1bf763e0409
-
SHA512
a1f2215a238ea9ffa328a6d123a579ef187ce5ff62881364624b752da4d45b0726d75c5dd7a5779d6805dde12d6b3c19d40895937841ef765a63c54ff0189a3a
-
SSDEEP
98304:zr26hzV4BSCAmhxfdnO3iGF8VPGOZz1YfxoltOV/iiODAg4Ykz5wj55:fV4BSCA8FpO3ByYOZzufxoltOPM9Ljb
Static task
static1
Malware Config
Targets
-
-
Target
b99cc0c11286366fb6d9b27e695b322a701a87f179ceeca0b39cb1bf763e0409
-
Size
4.1MB
-
MD5
6f26d81c10d8abd3bd62783915f0cfbf
-
SHA1
2943166a08cb156c155d4314b43d377681474bbd
-
SHA256
b99cc0c11286366fb6d9b27e695b322a701a87f179ceeca0b39cb1bf763e0409
-
SHA512
a1f2215a238ea9ffa328a6d123a579ef187ce5ff62881364624b752da4d45b0726d75c5dd7a5779d6805dde12d6b3c19d40895937841ef765a63c54ff0189a3a
-
SSDEEP
98304:zr26hzV4BSCAmhxfdnO3iGF8VPGOZz1YfxoltOV/iiODAg4Ykz5wj55:fV4BSCA8FpO3ByYOZzufxoltOPM9Ljb
-
Glupteba payload
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-