General
- Target ToolsUnlock_v8.2.exe
- Size 3.8MB
- Sample260716-d9775scv6l
- SHA256 aac28ced09009cba25fbb4580061a69c7c023c823128b67436d67ea5f2fd8c80
- MD5 ede81706758ec87fb93848ae702a1f51
- SHA1 3f5e6f145e861340e19c12fe97adb8ec39d463b1
- SHA512 e1fa28dc1e8e423a7d70619e411b020decd06583548d71827a72ee2206bf8dd5a7cf98c71288b035256f1bae0c74157ca52b9d19a2ff51dc7e77cd148902005e
- SSDEEP 49152:2fXCWpzPtf5zv6CkoaaeU0lav+QRROFN2YBhbBU9fg:26wwNimcop9BUi
- TLSH T14D067B0BBDA448E9C09AE735C9B681927735BC0C4B3123D72E64BA782FB67C16E75704
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Targets
-
- Target ToolsUnlock_v8.2.exe
- Size 3.8MB
- SHA256 aac28ced09009cba25fbb4580061a69c7c023c823128b67436d67ea5f2fd8c80
- MD5 ede81706758ec87fb93848ae702a1f51
- SHA1 3f5e6f145e861340e19c12fe97adb8ec39d463b1
- SHA512 e1fa28dc1e8e423a7d70619e411b020decd06583548d71827a72ee2206bf8dd5a7cf98c71288b035256f1bae0c74157ca52b9d19a2ff51dc7e77cd148902005e
- SSDEEP 49152:2fXCWpzPtf5zv6CkoaaeU0lav+QRROFN2YBhbBU9fg:26wwNimcop9BUi
- TLSH T14D067B0BBDA448E9C09AE735C9B681927735BC0C4B3123D72E64BA782FB67C16E75704
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of NtSetInformationThreadHideFromDebugger