General
-
Target
392508080ea4e200a1f7266acfc078c6445aa6d728a564545622b0b204f8cbc7
-
Size
4.1MB
-
Sample
230615-zmtl5abc65
-
MD5
a6d79e6f0f6e8874ac8bdf3c780ed4f2
-
SHA1
753ca5deb3540ec8306b074bd83527afbacfe00b
-
SHA256
392508080ea4e200a1f7266acfc078c6445aa6d728a564545622b0b204f8cbc7
-
SHA512
4b0bd7c2c83a4d6f43abdcd6258d3d97d1198365df07dd18242a60c2d68e57e2a839e00fd34e794c61c9848861dc619a4786feeeb892007d83e4e5778f02816e
-
SSDEEP
98304:b5gvbkQzx+togQWJvOnwZoVSyEekafUQXA4e:b5gDk5HvfZfyEEjXW
Static task
static1
Malware Config
Targets
-
-
Target
392508080ea4e200a1f7266acfc078c6445aa6d728a564545622b0b204f8cbc7
-
Size
4.1MB
-
MD5
a6d79e6f0f6e8874ac8bdf3c780ed4f2
-
SHA1
753ca5deb3540ec8306b074bd83527afbacfe00b
-
SHA256
392508080ea4e200a1f7266acfc078c6445aa6d728a564545622b0b204f8cbc7
-
SHA512
4b0bd7c2c83a4d6f43abdcd6258d3d97d1198365df07dd18242a60c2d68e57e2a839e00fd34e794c61c9848861dc619a4786feeeb892007d83e4e5778f02816e
-
SSDEEP
98304:b5gvbkQzx+togQWJvOnwZoVSyEekafUQXA4e:b5gDk5HvfZfyEEjXW
-
Glupteba payload
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-