General
-
Target
922e8909974e9e2357d3f281cb53fae57077acf1e2c1ca0c155b1e70f571db7d
-
Size
4.1MB
-
Sample
230328-t625qadf8v
-
MD5
ffc0cdbdf33fcc19161c6e7b63e9abde
-
SHA1
91fcd85a610a701f0d09e539a036603756308e09
-
SHA256
922e8909974e9e2357d3f281cb53fae57077acf1e2c1ca0c155b1e70f571db7d
-
SHA512
23ef81371126813fae2248a795b7c4679519abf77b53851b72ed609f583ca5854b1bbae7386a19f617c3d17450f54039449b883b2cca756eaddb449d85a88036
-
SSDEEP
98304:zFkiC6Dxkh193M37JyWckqXzjOES7r9ojcGWjOKoj:RkiCcxkJM34WcfNSNSUsj
Static task
static1
Malware Config
Targets
-
-
Target
922e8909974e9e2357d3f281cb53fae57077acf1e2c1ca0c155b1e70f571db7d
-
Size
4.1MB
-
MD5
ffc0cdbdf33fcc19161c6e7b63e9abde
-
SHA1
91fcd85a610a701f0d09e539a036603756308e09
-
SHA256
922e8909974e9e2357d3f281cb53fae57077acf1e2c1ca0c155b1e70f571db7d
-
SHA512
23ef81371126813fae2248a795b7c4679519abf77b53851b72ed609f583ca5854b1bbae7386a19f617c3d17450f54039449b883b2cca756eaddb449d85a88036
-
SSDEEP
98304:zFkiC6Dxkh193M37JyWckqXzjOES7r9ojcGWjOKoj:RkiCcxkJM34WcfNSNSUsj
-
Glupteba payload
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-