General
- Target Software - Genesis Thor 303 TKL Black.zip
- Size 2.7MB
- Sample260509-fpndcaes4k
- SHA256 b4d927688b493833deacedb185fc5eb817352866e2059c265c59dd7f479232e7
- MD5 4e2f8cf8f7e83e5926939cc96efaeef9
- SHA1 9abd3943a89240998836faa05ddb935909ef233b
- SHA512 a65d3831435151c12e717f72bf7d54d8376d7a13eb34a6ec22cd491f0166b70bc3f4b29c49758a191e3281f561da860fe79e8766751274d11b10a86fe5527030
- SSDEEP 49152:VV1Z322RDVcgFgj+MpdwOZGRbP1akGlQHTmYQ366KUPkfqvNylrPo5UmsuchJ56K:dp22lVcgFgpK+G9MjlQ/Qq8XvNylrQOD
- TLSH T158D533FCF81083BF8B7F96E61D0D94361C4A7D54EEF88A9ECA700CB6CE0415E906565A
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Targets
-
- Target Genesis Thor 303 TKL Black software/Genesis Thor 303 TKL Black setup.exe
- Size 3.2MB
- SHA256 4cf5110b106eb43ab772e73fa525f1efbbe2ef78ad944b593f600a1e152a9b86
- MD5 9e447bf6ea8ef3644019e0ccaca106f8
- SHA1 45884a34708528f1400cf403b0e952fda203f3dc
- SHA512 4b43ef83c32d17ad03e72f72c75a9b542510bb2c9977cf99f3d4a41896400f592a19fa65f8685043781131001df7495ce7577e0f5c83b0e684c0cf4e1a2dac7a
- SSDEEP 49152:Mqe3f6NmYpBqgx6VVr1E+kPgBTI0v6icaBibqHfe9rPO1+yvQwc/bbc5x:ZSiLoS6TOzPgZCUNHfe9rG8y5cPcT
- TLSH T148F5F13BB268653EC46B473255B39263597BFAB0A81B8C1F5BF0081DCF264603E3A755
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.