General
- Target $R8Z5WGF.exe
- Size 5.7MB
- Sample260601-tc7hcahx7z
- SHA256 310765cbf717437f957a46581728a1781742a0b2cd0f4e0ea5fca9547358518e
- MD5 18efc6518333756cc12b39640550801b
- SHA1 f48536c9151fde75dd23eada37d29a50c5393a26
- SHA512 b6cf0118b59ce7523c09bda322eda852a971d205ee14c7e00e091492b8ea9bdfb70eea73717ae3061ad7b2028f79deda1c55b401505bd248eaa376d1413d24c5
- SSDEEP 98304:Bf7wCQInrje/CAVMJy1WGsF3z9z3vZa+zQ1dcKGdJItyQaIN:Bfn6/VSlGC3z9z3vIDedJuyQaK
- TLSH T1B4563301F3837536E85409756DA394B42D43FBE629D524261EBCEF4F0A792833EB96B0
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Targets
-
- Target $R8Z5WGF.exe
- Size 5.7MB
- SHA256 310765cbf717437f957a46581728a1781742a0b2cd0f4e0ea5fca9547358518e
- MD5 18efc6518333756cc12b39640550801b
- SHA1 f48536c9151fde75dd23eada37d29a50c5393a26
- SHA512 b6cf0118b59ce7523c09bda322eda852a971d205ee14c7e00e091492b8ea9bdfb70eea73717ae3061ad7b2028f79deda1c55b401505bd248eaa376d1413d24c5
- SSDEEP 98304:Bf7wCQInrje/CAVMJy1WGsF3z9z3vZa+zQ1dcKGdJItyQaIN:Bfn6/VSlGC3z9z3vIDedJuyQaK
- TLSH T1B4563301F3837536E85409756DA394B42D43FBE629D524261EBCEF4F0A792833EB96B0
- MD5 SHA1 SHA512 SSDEEP TLSH
Executes dropped EXE
Loads dropped DLL
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.