General
-
Target
16b0e691760967f08200d921b0ece225c5b4f90c04973100219e89d63a303e99
-
Size
4.1MB
-
Sample
230329-p4kqfagd24
-
MD5
f299a28b8c54e20964584b418c9436fa
-
SHA1
e1b64efce40c5bdb7c200be2114f4249158e6192
-
SHA256
16b0e691760967f08200d921b0ece225c5b4f90c04973100219e89d63a303e99
-
SHA512
2d8da07b7b78e00e9380aa0c8d4adb50a1a236324fe8cb01c971d49ff31018d18dde445e825fbf8827ef1d46f783f7a8f468d315be01b46b51f61645ef404c0b
-
SSDEEP
98304:BCMWkp86c+ThfVhOb/JsHgMk0RJaaLNBcSCO4FN+QrSckbHO:LWk2L+13UyHgb+auNuxfFjrbkbu
Static task
static1
Malware Config
Targets
-
-
Target
16b0e691760967f08200d921b0ece225c5b4f90c04973100219e89d63a303e99
-
Size
4.1MB
-
MD5
f299a28b8c54e20964584b418c9436fa
-
SHA1
e1b64efce40c5bdb7c200be2114f4249158e6192
-
SHA256
16b0e691760967f08200d921b0ece225c5b4f90c04973100219e89d63a303e99
-
SHA512
2d8da07b7b78e00e9380aa0c8d4adb50a1a236324fe8cb01c971d49ff31018d18dde445e825fbf8827ef1d46f783f7a8f468d315be01b46b51f61645ef404c0b
-
SSDEEP
98304:BCMWkp86c+ThfVhOb/JsHgMk0RJaaLNBcSCO4FN+QrSckbHO:LWk2L+13UyHgb+auNuxfFjrbkbu
-
Glupteba payload
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-