General
- Target Polyverse-Wider-V2.0.0(1).zip
- Size 7.6MB
- Sample260720-dbj3nafx9s
- SHA256 96cdbebb2d2b5d873a7ffbcfbc534efd1677a73334946c7bce30dde63e45908e
- MD5 30a429dfbe94ff313161d5b55e3b3237
- SHA1 55a322d7b17b6a35510476587186ac4b1298208c
- SHA512 39e6a9d295d26fe9b5e9c30eb64d213138c1d326db264bf95093b2c03e2c304508381a2ed42410f13fe064a0a9bb2d9fd1c329f331213c545e3152e60eaff277
- SSDEEP 196608:t5ih6Tz1Pz8x0GAnguCF/p+pBlb2ua70DTFhE3X7V/Uy0RCH/XC:t5ihuBPzbGAnemjHEH7V/UW/S
- TLSH T1AB86332E2E9822E499DBE4F375C46FC920A56D87305DDEFBB746EF5002D8E586853032
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Targets
-
- Target Polyverse - Wider Setup (v2.0.0).exe
- Size 5.4MB
- SHA256 ee883fc37156f2bb0fce68f8242179e9cbbb91893735bb15085a639cb1a9edc2
- MD5 525f6f4558d4daa2ccd12d417ccfd5d0
- SHA1 2bdf1b3b7ecc241d1d7bf51d382b895a26e76eaf
- SHA512 cded158603a644d0735efc64bd6e736cfeba0e30c4bcca1103341bb2ca1018ee8bfbc6eaa153d80602bd3a13dca5563f6cdc2e9dd46ceacc0928dd2b1ffbb2a5
- SSDEEP 98304:VSiC12ScEMKCeG7cHnOi3zSkMz1t9pgBb7bbVBJ0y2ru1CP0DxxDQ:U1H1DG7OOi3OkMn9pgV7bb+aCP0DxBQ
- TLSH T17446123FB268613EC4AE0B3245B39360597B7B61B81A8C2F47F0490DDF665701E3BA56
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.