General
- Target setup.exe
- Size 5.4MB
- Sample260720-ew4hgaex7k
- SHA256 c3000999d291b05743bcd383020206662af87d2217a5043b891f1d3ecda94f9f
- MD5 9b9b9d6e458f9ea021f4d3a010203a76
- SHA1 5393e6fdec5c0b28b7b60d762977115d6ab19b3d
- SHA512 a186fb37b842af7c84b09f847da4aa5c0a74d870baa1d3da42ec7cbcadfebf28cce7e597c7affd39c5715c2209614e04686392023d1b9089728c0dd35b6b886a
- SSDEEP 98304:5f7wCQInrje/CAVMltebdcd8rJ2G078uEjYfMWASz7l7+OMHBHRevIG9ZN:5fn6/VqwbdcCO7ujYNAS5CHRRy
- TLSH T14C463351E3E3583AE8A809351D02517C6E27F6B92BC560276EBCDF5F0A3828379F5760
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Targets
-
- Target setup.exe
- Size 5.4MB
- SHA256 c3000999d291b05743bcd383020206662af87d2217a5043b891f1d3ecda94f9f
- MD5 9b9b9d6e458f9ea021f4d3a010203a76
- SHA1 5393e6fdec5c0b28b7b60d762977115d6ab19b3d
- SHA512 a186fb37b842af7c84b09f847da4aa5c0a74d870baa1d3da42ec7cbcadfebf28cce7e597c7affd39c5715c2209614e04686392023d1b9089728c0dd35b6b886a
- SSDEEP 98304:5f7wCQInrje/CAVMltebdcd8rJ2G078uEjYfMWASz7l7+OMHBHRevIG9ZN:5fn6/VqwbdcCO7ujYNAS5CHRRy
- TLSH T14C463351E3E3583AE8A809351D02517C6E27F6B92BC560276EBCDF5F0A3828379F5760
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.