General
- Target nlite-1-4-9-3.exe
- Size 2.9MB
- Sample260624-hxtansax7v
- SHA256 3854c1b6c60f2f4a2b07c824661ea518444004c115c04f19415f0429e5b11e08
- MD5 7d546428478ec098ee658f5441db755d
- SHA1 4de715b5c182a1b7a97bc75d2910d6b04871129b
- SHA512 9dc23df4317709932f97a07cb849a6f8094bb5de097fc031e9c249239bbe50fbcaf7da2d0e04d561858bd9a09574f158cf7027ee755ac68b92c7afac47b5312c
- SSDEEP 49152:C+bmwDw2zgVfILHiBdGqj5Y4c+b7mbMQa2jO6UbKpTR33d/n+XhuioLnN8:zbmwDwe6uCGqNB3vgM/Guov2YB7N8
- TLSH T190E53302779744B1E8618974CDB58005BD63BFA929F1241E3EF4E98E4AF57C2C876B32
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Targets
-
- Target nlite-1-4-9-3.exe
- Size 2.9MB
- SHA256 3854c1b6c60f2f4a2b07c824661ea518444004c115c04f19415f0429e5b11e08
- MD5 7d546428478ec098ee658f5441db755d
- SHA1 4de715b5c182a1b7a97bc75d2910d6b04871129b
- SHA512 9dc23df4317709932f97a07cb849a6f8094bb5de097fc031e9c249239bbe50fbcaf7da2d0e04d561858bd9a09574f158cf7027ee755ac68b92c7afac47b5312c
- SSDEEP 49152:C+bmwDw2zgVfILHiBdGqj5Y4c+b7mbMQa2jO6UbKpTR33d/n+XhuioLnN8:zbmwDwe6uCGqNB3vgM/Guov2YB7N8
- TLSH T190E53302779744B1E8618974CDB58005BD63BFA929F1241E3EF4E98E4AF57C2C876B32
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.