General
- Target Native Instruments FM8 v1 4 6.exe
- Size 2.0MB
- Sample260718-3dctsse19n
- SHA256 479a0e61ceff4f6894612942c51de6850505cff143b7fbd8ae0a42392e5d27a1
- MD5 90de6a0a0bcd49c14699cd4fc527102c
- SHA1 cf40ef73906e04c02e7e60d10cfc714d017381ef
- SHA512 e2cad5f4f4fb75642c96323c9cdfd09e61d9218976b4a18eebd32da7bd91ed3a6c715195b644e46850e31c0abfc29fe4f63055bf46790f2d195cdcf62f90b223
- SSDEEP 49152:yAX7NlIUt1ITeLKFhVCsmMqrc+BG2L8dr:yAX7XIqKTeWFDvqrc+34
- TLSH T198A5D033F28AA53EE06E5A365AB29150543B7A616D138D0BD6EC389CCF352603D3B747
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Targets
-
- Target Native Instruments FM8 v1 4 6.exe
- Size 2.0MB
- SHA256 479a0e61ceff4f6894612942c51de6850505cff143b7fbd8ae0a42392e5d27a1
- MD5 90de6a0a0bcd49c14699cd4fc527102c
- SHA1 cf40ef73906e04c02e7e60d10cfc714d017381ef
- SHA512 e2cad5f4f4fb75642c96323c9cdfd09e61d9218976b4a18eebd32da7bd91ed3a6c715195b644e46850e31c0abfc29fe4f63055bf46790f2d195cdcf62f90b223
- SSDEEP 49152:yAX7NlIUt1ITeLKFhVCsmMqrc+BG2L8dr:yAX7XIqKTeWFDvqrc+34
- TLSH T198A5D033F28AA53EE06E5A365AB29150543B7A616D138D0BD6EC389CCF352603D3B747
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.