General
- Target setup.exe
- Size 5.4MB
- Sample260627-vslfgscv7r
- SHA256 f3bcc36f92459e22248ba435056ff84b8caf8072ab1515e88a8ff5949bef3d7c
- MD5 00472dcb7dfd8196b8090d9d4e0f52a7
- SHA1 7e637f9fa4a728744997aa7c003f820014a111f5
- SHA512 ac7f8aa6e8909cd10dd33a20a0b190e33cd83e0457f87b867c76b93b9b9db82380af62981f23c3a37e456f6b007ff53d5576d70dd039b360c8f06eb261351030
- SSDEEP 98304:wf7wCQInrje/CAVMJy1WzsBNlMqfN/TTeFFZkwIQ3ZnRlsHN:wfn6/VSlzCN6kN/TTOPlst
- TLSH T157463341E7C34836E8640D345D1598BC6D12A7BB19E1651A1EB8DFCF0F7A1C3B8BA6B0
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Targets
-
- Target setup.exe
- Size 5.4MB
- SHA256 f3bcc36f92459e22248ba435056ff84b8caf8072ab1515e88a8ff5949bef3d7c
- MD5 00472dcb7dfd8196b8090d9d4e0f52a7
- SHA1 7e637f9fa4a728744997aa7c003f820014a111f5
- SHA512 ac7f8aa6e8909cd10dd33a20a0b190e33cd83e0457f87b867c76b93b9b9db82380af62981f23c3a37e456f6b007ff53d5576d70dd039b360c8f06eb261351030
- SSDEEP 98304:wf7wCQInrje/CAVMJy1WzsBNlMqfN/TTeFFZkwIQ3ZnRlsHN:wfn6/VSlzCN6kN/TTOPlst
- TLSH T157463341E7C34836E8640D345D1598BC6D12A7BB19E1651A1EB8DFCF0F7A1C3B8BA6B0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.