General
-
Target
eb3f1955afe0a850433f4eb4fa7ccf5ea955027f67fd3247e1708cf2a3c9e657
-
Size
4.2MB
-
Sample
230607-s2mc2acc78
-
MD5
806e03556e2ec1a8c01da5c04bc09efb
-
SHA1
93d05ad3ff30d7bce4e1ca916bf0d8b4f5209bae
-
SHA256
eb3f1955afe0a850433f4eb4fa7ccf5ea955027f67fd3247e1708cf2a3c9e657
-
SHA512
ed058d771322c925864f84ddfe433c506bd9e0ee2179b2ee646bfc7ebb302db65c5281b6c6c96740b15ad24ee08158c4cb3b78776b4b17410b1b6e22125e0890
-
SSDEEP
98304:IXBXbxwMASR72enw18wQxWVMeT7u+9UVKOQ5LwfsZVn:UBLxkG72BAWVJXuzQ5LH
Static task
static1
Malware Config
Targets
-
-
Target
eb3f1955afe0a850433f4eb4fa7ccf5ea955027f67fd3247e1708cf2a3c9e657
-
Size
4.2MB
-
MD5
806e03556e2ec1a8c01da5c04bc09efb
-
SHA1
93d05ad3ff30d7bce4e1ca916bf0d8b4f5209bae
-
SHA256
eb3f1955afe0a850433f4eb4fa7ccf5ea955027f67fd3247e1708cf2a3c9e657
-
SHA512
ed058d771322c925864f84ddfe433c506bd9e0ee2179b2ee646bfc7ebb302db65c5281b6c6c96740b15ad24ee08158c4cb3b78776b4b17410b1b6e22125e0890
-
SSDEEP
98304:IXBXbxwMASR72enw18wQxWVMeT7u+9UVKOQ5LwfsZVn:UBLxkG72BAWVJXuzQ5LH
-
Glupteba payload
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-