General
-
Target
9f0a570f42b54613eb80949014730264a7918f826173da06c1039515e7d5ae31
-
Size
4.1MB
-
Sample
230328-a3f9ashh7w
-
MD5
c465166739228f549f778438f1b3bc45
-
SHA1
1f0ce7a045c5c718e6a6e00455fdb84304246dd8
-
SHA256
9f0a570f42b54613eb80949014730264a7918f826173da06c1039515e7d5ae31
-
SHA512
91dc221d69b1a46469564ab678779fe30bd32d6ebd689e2519af3d38efbf4add3c5b5dbe34657e3b079200bd8fc015d890eeb34585aa335c6688dd82ed5881b2
-
SSDEEP
98304:chcDO7EgzRJZT3IHKMrqkJWE0LhQ6uMYKra:cO/LKQqNE0W0a
Static task
static1
Malware Config
Targets
-
-
Target
9f0a570f42b54613eb80949014730264a7918f826173da06c1039515e7d5ae31
-
Size
4.1MB
-
MD5
c465166739228f549f778438f1b3bc45
-
SHA1
1f0ce7a045c5c718e6a6e00455fdb84304246dd8
-
SHA256
9f0a570f42b54613eb80949014730264a7918f826173da06c1039515e7d5ae31
-
SHA512
91dc221d69b1a46469564ab678779fe30bd32d6ebd689e2519af3d38efbf4add3c5b5dbe34657e3b079200bd8fc015d890eeb34585aa335c6688dd82ed5881b2
-
SSDEEP
98304:chcDO7EgzRJZT3IHKMrqkJWE0LhQ6uMYKra:cO/LKQqNE0W0a
-
Glupteba payload
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-