General
-
Target
97207f73a586db1d75a4b803a05fd8893b824773311f3f5ef6b20aa0b5a1ffa2
-
Size
4.2MB
-
Sample
230606-yp3gdafh91
-
MD5
7c03a8b0c0cfa03d2c574f4f62354810
-
SHA1
be61c392486e32ba6c27d9cf69262db1d972c948
-
SHA256
97207f73a586db1d75a4b803a05fd8893b824773311f3f5ef6b20aa0b5a1ffa2
-
SHA512
020db6f32c43ff599b05cff0d66d1cec20ea8a27c2556171904093511c0b3b9c711d29a0df5a67f80a1007c39e37def5b276d7f8f148faa8c563c3f506a98f27
-
SSDEEP
98304:OUo9FY7WfUngDNq1VwUR/NPDfiCH7lCBzt8qO:Tgy7Wf4ZXwUFNrqw4pt89
Static task
static1
Malware Config
Targets
-
-
Target
97207f73a586db1d75a4b803a05fd8893b824773311f3f5ef6b20aa0b5a1ffa2
-
Size
4.2MB
-
MD5
7c03a8b0c0cfa03d2c574f4f62354810
-
SHA1
be61c392486e32ba6c27d9cf69262db1d972c948
-
SHA256
97207f73a586db1d75a4b803a05fd8893b824773311f3f5ef6b20aa0b5a1ffa2
-
SHA512
020db6f32c43ff599b05cff0d66d1cec20ea8a27c2556171904093511c0b3b9c711d29a0df5a67f80a1007c39e37def5b276d7f8f148faa8c563c3f506a98f27
-
SSDEEP
98304:OUo9FY7WfUngDNq1VwUR/NPDfiCH7lCBzt8qO:Tgy7Wf4ZXwUFNrqw4pt89
-
Glupteba payload
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-