General
-
Target
avast_free_antivirus_setup_online.exe
-
Size
256KB
-
Sample
230331-y4zc9see2x
-
MD5
47f173cbb0347b15573208f9a25200b2
-
SHA1
805d9b978da2c1c825d942b83169d14646be3e44
-
SHA256
8cecb52c489f92e8622b824fd01e0e7a25d029c4455ea6c6b1e2032a6285a3ad
-
SHA512
d4a460adf093b72f39b5e32d6edd509840718ed2429f77dcf0e67a6af49b76fe61607b574f1feb54a0c29aff60f4dd5f6c7ae9f30a8c5786ec2859e335a19754
-
SSDEEP
6144:TCfHrZae3GFqRQcMeh4WpywpjchNCPn9ebT6:TCfLZadcM24fRNiea
Static task
static1
Behavioral task
behavioral1
Sample
avast_free_antivirus_setup_online.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
avast_free_antivirus_setup_online.exe
Resource
win10v2004-20230220-en
Malware Config
Targets
-
-
Target
avast_free_antivirus_setup_online.exe
-
Size
256KB
-
MD5
47f173cbb0347b15573208f9a25200b2
-
SHA1
805d9b978da2c1c825d942b83169d14646be3e44
-
SHA256
8cecb52c489f92e8622b824fd01e0e7a25d029c4455ea6c6b1e2032a6285a3ad
-
SHA512
d4a460adf093b72f39b5e32d6edd509840718ed2429f77dcf0e67a6af49b76fe61607b574f1feb54a0c29aff60f4dd5f6c7ae9f30a8c5786ec2859e335a19754
-
SSDEEP
6144:TCfHrZae3GFqRQcMeh4WpywpjchNCPn9ebT6:TCfLZadcM24fRNiea
Score8/10-
Downloads MZ/PE file
-
Drops file in Drivers directory
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Registers COM server for autorun
-
Adds Run key to start application
-
Checks for any installed AV software in registry
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Drops file in System32 directory
-