General
- Target setup.exe
- Size 3.9MB
- Sample260619-2fjjpabz2m
- SHA256 81e45c1e6d6a718624159e116e6daa8c1547f39bef7f56163303e7eca8abfae1
- MD5 81e69b29c4c09391a12b665e7661f48e
- SHA1 b103b694d12544c9db444badd9e2263d219698b1
- SHA512 5476b9fa6967aefcb73793c965224c93d2ab46268830fcb71c69bc864e22e0cb92512959fe7a728ee77c2bde00e3ce9eda64d015ff1ef34273292707680c0042
- SSDEEP 98304:QhVVJqioKMFh1qKsbZcMgsGwNmlCNE4CJgcMyfQP/4:QhV1pMzHQCMFGImHgcM54
- TLSH T17F16331B17C16C87F9675136933EEA7EF3B4F842AE86674B27728DE826DF90101401DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Targets
-
- Target setup.exe
- Size 3.9MB
- SHA256 81e45c1e6d6a718624159e116e6daa8c1547f39bef7f56163303e7eca8abfae1
- MD5 81e69b29c4c09391a12b665e7661f48e
- SHA1 b103b694d12544c9db444badd9e2263d219698b1
- SHA512 5476b9fa6967aefcb73793c965224c93d2ab46268830fcb71c69bc864e22e0cb92512959fe7a728ee77c2bde00e3ce9eda64d015ff1ef34273292707680c0042
- SSDEEP 98304:QhVVJqioKMFh1qKsbZcMgsGwNmlCNE4CJgcMyfQP/4:QhV1pMzHQCMFGImHgcM54
- TLSH T17F16331B17C16C87F9675136933EEA7EF3B4F842AE86674B27728DE826DF90101401DA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Drops file in System32 directory