General
-
Target
cfc0842867be1cc65326e2d4949bd92e6bd903e85cc228f7bd913f4b634a7371
-
Size
4.1MB
-
Sample
230327-smd34sga81
-
MD5
22292eb2b0096ec984867034eed55e8a
-
SHA1
4408e912caa55816ae033cd9ffab3d6e6eb1d817
-
SHA256
cfc0842867be1cc65326e2d4949bd92e6bd903e85cc228f7bd913f4b634a7371
-
SHA512
c50fddadc7690d4d657aac0c3a3a3ae25f84dbca30f1be13144455265cabc932524263f6f5f80d5d8d2f4bcb9bb4157989cbc7c906f6357c1997e65f1c07c4eb
-
SSDEEP
98304:u1zMpe1Qf99aDGxOrpj7unH9LBjGRKbLQ1JKAfMgoxmGhB5hb8GsNRJZ:TMqtxO1jinzKRcLcRRWBphAdb
Static task
static1
Malware Config
Targets
-
-
Target
cfc0842867be1cc65326e2d4949bd92e6bd903e85cc228f7bd913f4b634a7371
-
Size
4.1MB
-
MD5
22292eb2b0096ec984867034eed55e8a
-
SHA1
4408e912caa55816ae033cd9ffab3d6e6eb1d817
-
SHA256
cfc0842867be1cc65326e2d4949bd92e6bd903e85cc228f7bd913f4b634a7371
-
SHA512
c50fddadc7690d4d657aac0c3a3a3ae25f84dbca30f1be13144455265cabc932524263f6f5f80d5d8d2f4bcb9bb4157989cbc7c906f6357c1997e65f1c07c4eb
-
SSDEEP
98304:u1zMpe1Qf99aDGxOrpj7unH9LBjGRKbLQ1JKAfMgoxmGhB5hb8GsNRJZ:TMqtxO1jinzKRcLcRRWBphAdb
-
Glupteba payload
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-