General
-
Target
memreduct-3.4-setup.exe
-
Size
309KB
-
Sample
240610-zlbd6azbma
-
MD5
0f74e88d113f46798dc0f5d69c26da2f
-
SHA1
ace6920cd953bca45cb798672592ae7089d6d01d
-
SHA256
a7ba8b9da0a1fdf7a886fe86b2ca55b4afe05d69b2c9c4d33b27d65986d6a033
-
SHA512
6434786151677e3cfef57b2d7069dc37a4b4d08c8c7eb7e817d7a956517a9d298bc08b38f8342d91234a65979ade1898dfe79ae9cb218332d5496c1517c124ae
-
SSDEEP
6144:4Ya6eFisfjzl/eP3OD8Jb+Wh1btdxlrgTM5onRIR7YdH3zfbv7cxQ1/C8z:4YgzjJWPe0+ybt+TMGnqR7YFfH+QFpz
Static task
static1
Behavioral task
behavioral1
Sample
memreduct-3.4-setup.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
memreduct-3.4-setup.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
memreduct-3.4-setup.exe
Resource
macos-20240410-en
Behavioral task
behavioral4
Sample
memreduct-3.4-setup.exe
Resource
ubuntu2404-amd64-20240523-en
Malware Config
Targets
-
-
Target
memreduct-3.4-setup.exe
-
Size
309KB
-
MD5
0f74e88d113f46798dc0f5d69c26da2f
-
SHA1
ace6920cd953bca45cb798672592ae7089d6d01d
-
SHA256
a7ba8b9da0a1fdf7a886fe86b2ca55b4afe05d69b2c9c4d33b27d65986d6a033
-
SHA512
6434786151677e3cfef57b2d7069dc37a4b4d08c8c7eb7e817d7a956517a9d298bc08b38f8342d91234a65979ade1898dfe79ae9cb218332d5496c1517c124ae
-
SSDEEP
6144:4Ya6eFisfjzl/eP3OD8Jb+Wh1btdxlrgTM5onRIR7YdH3zfbv7cxQ1/C8z:4YgzjJWPe0+ybt+TMGnqR7YFfH+QFpz
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Legitimate hosting services abused for malware hosting/C2
-
Launch Agent
Adversaries may create or modify launch agents to repeatedly execute malicious payloads as part of persistence.
-