General
-
Target
55cacc5bc9d59502526310cb0df238cc0a5ac2b601669ad7f92ddf7e0adb81f2
-
Size
4.2MB
-
Sample
230607-l4jxcsab4z
-
MD5
28414649117b5f1ffaf733f494a1bdae
-
SHA1
fe6542d9f43b6c14fc56abb21aafb7c6ae25770c
-
SHA256
55cacc5bc9d59502526310cb0df238cc0a5ac2b601669ad7f92ddf7e0adb81f2
-
SHA512
f10d825fa5fd10ed482a521bbd360d1f3f984929e1762e4025f3f8f721d10a7028c4f63a9d4fea2b26a6ddb71705ddf6ac7902e1926b45e71ef9f2889dccdf39
-
SSDEEP
98304:/xwPu98IQXpACiy6CclaxsM3CJSQ1+gsp/1AQGn9j1:JwPu98IQXaCBwa/CJH+gsdOF9x
Static task
static1
Malware Config
Targets
-
-
Target
55cacc5bc9d59502526310cb0df238cc0a5ac2b601669ad7f92ddf7e0adb81f2
-
Size
4.2MB
-
MD5
28414649117b5f1ffaf733f494a1bdae
-
SHA1
fe6542d9f43b6c14fc56abb21aafb7c6ae25770c
-
SHA256
55cacc5bc9d59502526310cb0df238cc0a5ac2b601669ad7f92ddf7e0adb81f2
-
SHA512
f10d825fa5fd10ed482a521bbd360d1f3f984929e1762e4025f3f8f721d10a7028c4f63a9d4fea2b26a6ddb71705ddf6ac7902e1926b45e71ef9f2889dccdf39
-
SSDEEP
98304:/xwPu98IQXpACiy6CclaxsM3CJSQ1+gsp/1AQGn9j1:JwPu98IQXaCBwa/CJH+gsdOF9x
-
Glupteba payload
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-