General
-
Target
0ac980a4d07f5c606acf9c994cfb86e03ed161b2e48ac51363b464859745ee40
-
Size
4.2MB
-
Sample
230606-ytjvtsfd54
-
MD5
1df9b6370344f8152cf661cfef5b33cc
-
SHA1
9182d37faafab0eda848d2141f6780a283d8f6f2
-
SHA256
0ac980a4d07f5c606acf9c994cfb86e03ed161b2e48ac51363b464859745ee40
-
SHA512
dbf4640af9b3048e0fba1ae89a4dac511f842be739b05f1e6ac7465107a0d0a3577ea166ee31f84e3bf42402b46ef865d40b7a44ad6ab3850e3c91e1ad93e233
-
SSDEEP
98304:WUo9FY7WfUngDNq1VwUR/NPDfiCH7lCBzt8qm:7gy7Wf4ZXwUFNrqw4pt8V
Static task
static1
Malware Config
Targets
-
-
Target
0ac980a4d07f5c606acf9c994cfb86e03ed161b2e48ac51363b464859745ee40
-
Size
4.2MB
-
MD5
1df9b6370344f8152cf661cfef5b33cc
-
SHA1
9182d37faafab0eda848d2141f6780a283d8f6f2
-
SHA256
0ac980a4d07f5c606acf9c994cfb86e03ed161b2e48ac51363b464859745ee40
-
SHA512
dbf4640af9b3048e0fba1ae89a4dac511f842be739b05f1e6ac7465107a0d0a3577ea166ee31f84e3bf42402b46ef865d40b7a44ad6ab3850e3c91e1ad93e233
-
SSDEEP
98304:WUo9FY7WfUngDNq1VwUR/NPDfiCH7lCBzt8qm:7gy7Wf4ZXwUFNrqw4pt8V
-
Glupteba payload
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-