General
- Target win32diskimager-1.0.0-install.exe
- Size 12.0MB
- Sample260712-ljerxafx4q
- SHA256 a51c9fc75c9caa44df03502838f229a70d484963f54675c241799093a59d8874
- MD5 be92e76baabc97b3f093ff734dd3f75b
- SHA1 0240442cc4592240f14a48500044311b43ca92e3
- SHA512 171d25629d96fb2eaf8041d74ebd1a2e405b4d4eec5e3fe606960876e606d5b66bb348768c8b8c0e059ac8507d8d004b47013f7cd8ed19f71e567eb624278ebe
- SSDEEP 196608:W/1lgyagDiLw1/tTpbWTAJ/siEFf+ZZ8YSwmpTvjvwOhsOPt2kTeBBV:mkyLDuwdtQTAVsiEs4Tjv/H7S
- TLSH T1EEC6334B53E758F6F5C88E7856B450647C53396A2EE9E8C50CFEC61C2CFA0860D79B22
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Targets
-
- Target win32diskimager-1.0.0-install.exe
- Size 12.0MB
- SHA256 a51c9fc75c9caa44df03502838f229a70d484963f54675c241799093a59d8874
- MD5 be92e76baabc97b3f093ff734dd3f75b
- SHA1 0240442cc4592240f14a48500044311b43ca92e3
- SHA512 171d25629d96fb2eaf8041d74ebd1a2e405b4d4eec5e3fe606960876e606d5b66bb348768c8b8c0e059ac8507d8d004b47013f7cd8ed19f71e567eb624278ebe
- SSDEEP 196608:W/1lgyagDiLw1/tTpbWTAJ/siEFf+ZZ8YSwmpTvjvwOhsOPt2kTeBBV:mkyLDuwdtQTAVsiEs4Tjv/H7S
- TLSH T1EEC6334B53E758F6F5C88E7856B450647C53396A2EE9E8C50CFEC61C2CFA0860D79B22
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.