General
- Target Prestige Client.exe
- Size 2.0MB
- Sample260718-nzg83sdx2v
- SHA256 7c3aaebd71e1b3b2328f88d86fb94447e6d8c86a48f610a88a90a248c84aa670
- MD5 1e799a9be6f18e2b3c7eae380715fee6
- SHA1 b708c21b2ebeafbd20b23bc35aee11d4a7031433
- SHA512 b37890365c64e7701ede57322274615c824a4d731ad500e0ec8c5b57f7f6aa0d082d7ad34a02532b094c8f862d2d3a294a20c9d31ebef703af88637d679fafb8
- SSDEEP 49152:yAX7N6IUt1ITeLKFhVCsmMqrc+BG2L8dg:yAX7gIqKTeWFDvqrc+35
- TLSH T11CA5D033F28AA53EE06E5A365AB29150543B7A616D138D0BD6EC389CCF352603D3B747
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Targets
-
- Target Prestige Client.exe
- Size 2.0MB
- SHA256 7c3aaebd71e1b3b2328f88d86fb94447e6d8c86a48f610a88a90a248c84aa670
- MD5 1e799a9be6f18e2b3c7eae380715fee6
- SHA1 b708c21b2ebeafbd20b23bc35aee11d4a7031433
- SHA512 b37890365c64e7701ede57322274615c824a4d731ad500e0ec8c5b57f7f6aa0d082d7ad34a02532b094c8f862d2d3a294a20c9d31ebef703af88637d679fafb8
- SSDEEP 49152:yAX7N6IUt1ITeLKFhVCsmMqrc+BG2L8dg:yAX7gIqKTeWFDvqrc+35
- TLSH T11CA5D033F28AA53EE06E5A365AB29150543B7A616D138D0BD6EC389CCF352603D3B747
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.