General
- Target PlayTorrio-Windows-Setup.exe
- Size 33.5MB
- Sample260703-pqdd7sd19l
- SHA256 6cddf04c16cc7dd018335857755c83d72150da280c6e7993e30df1c16b5f2714
- MD5 6248d2b523db4f529bc06e9210c3d355
- SHA1 a0b059f71ca61d25e94bb60d013d197d13e64aa2
- SHA512 5004656c214b8be7a2f186ae7986eeabbaa3dbe09f90105701ef93266bb33be0483d3eeaea64d9b8994070e6cbd175b681467f9053f0e61ac81e57936741ba37
- SSDEEP 786432:dVwCye1OryQa6xo/HUm8xgzGkcFPPuVg4jDuLSDF:gC/BQa6xesQcpGMO
- TLSH T1D577333FB28F753EE12D29367A71AA14843BA660A8528C06D6F0C44CDF665B11D3F787
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Targets
-
- Target PlayTorrio-Windows-Setup.exe
- Size 33.5MB
- SHA256 6cddf04c16cc7dd018335857755c83d72150da280c6e7993e30df1c16b5f2714
- MD5 6248d2b523db4f529bc06e9210c3d355
- SHA1 a0b059f71ca61d25e94bb60d013d197d13e64aa2
- SHA512 5004656c214b8be7a2f186ae7986eeabbaa3dbe09f90105701ef93266bb33be0483d3eeaea64d9b8994070e6cbd175b681467f9053f0e61ac81e57936741ba37
- SSDEEP 786432:dVwCye1OryQa6xo/HUm8xgzGkcFPPuVg4jDuLSDF:gC/BQa6xesQcpGMO
- TLSH T1D577333FB28F753EE12D29367A71AA14843BA660A8528C06D6F0C44CDF665B11D3F787
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.