Extracted

• • Target

    Server.exe

  • Size

    37KB

  • MD5

    738b663cfc11cd8d13b649e744f2eac9

  • SHA1

    acff033151fd4edb675e50e0be2276a0a4ccc97b

  • SHA256

    f0a7d5715cc34a12f251c0a9534f668d0869bc1c152c3ff41df94d3f09b2f5e7

  • SHA512

    f85951bd539a78f8b8a332cbbdb24d9597b7acbc2f1beab2fbfe8607b8c58f99c1e38e76dd78af915b36238e77e2051b1e87dd8cdf415545ccdcc5de48e89ac3

  • SSDEEP

    384:DansiDjT95hL5YyUvZ7vLOw4qYddlrAF+rMRTyN/0L+EcoinblneHQM3epzXlNr2:2vv5zUvZ7blYrlrM+rMRa8Nu/kt

  Score

  8^/10

  discoveryevasionpersistence

  • Modifies Windows Firewall

    evasion

  • Executes dropped EXE

  • Loads dropped DLL

  • Registers COM server for autorun

    persistence

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1