General
- Target setup.exe
- Size 5.3MB
- Sample260502-ejmdescy6n
- SHA256 b0aa61109d5c5a124f8b2a33761bb7b440173daca7f27dada1d3ee88eb0fb062
- MD5 08a4120c825e8f53cb1257b741f24676
- SHA1 48a1845adf2ad276f8726c4dc13c9804a628a39e
- SHA512 224c77df305377465fe28b22250c1191ba93139cb42ac7728908d6196ca9eaa60948da66853ef4b4f519803116ad05a5622d6c7cc4e3fe08d74cc91a39116cad
- SSDEEP 98304:Tf7wCQInrje/CAVMJhkjIsyfMn+PFek00YPN4dCYzSt7bSuM/QNN:Tfn6/VS4zyknW44dCYg7b1Ms
- TLSH T166463316A3C30436D4680C35AD12A17D6D13B3A516E9B1952FFCD78F0AB41C3BEBA9B1
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Targets
-
- Target setup.exe
- Size 5.3MB
- SHA256 b0aa61109d5c5a124f8b2a33761bb7b440173daca7f27dada1d3ee88eb0fb062
- MD5 08a4120c825e8f53cb1257b741f24676
- SHA1 48a1845adf2ad276f8726c4dc13c9804a628a39e
- SHA512 224c77df305377465fe28b22250c1191ba93139cb42ac7728908d6196ca9eaa60948da66853ef4b4f519803116ad05a5622d6c7cc4e3fe08d74cc91a39116cad
- SSDEEP 98304:Tf7wCQInrje/CAVMJhkjIsyfMn+PFek00YPN4dCYzSt7bSuM/QNN:Tfn6/VS4zyknW44dCYg7b1Ms
- TLSH T166463316A3C30436D4680C35AD12A17D6D13B3A516E9B1952FFCD78F0AB41C3BEBA9B1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.