General
- Target grabber_1784597067.exe
- Size 16.3MB
- Sample260721-btff3sc16y
- SHA256 925850149f996e4c5c26dc773946303c820cd45037a5da53ff5e16ba3c1876e8
- MD5 af0cdf7664a44bb14b7b25324239b5d8
- SHA1 da1c7b92311ee86b2b4e2d411bacae6a8cd65ac9
- SHA512 8055d6940f1478b86195e7a07d47780af558f015fed20152385e702d74adde22f64c626397cf17cdf149b6933c51039be1b0e9777dd14533ac1228ef7d999661
- SSDEEP 393216:dn7LMogIfUKOcFXEAphVtnIwQSg+SPm5WtTIvF7dvplk:t4o58KPFRphDBo+PWtUvF7e
- TLSH T18C0733A8B2814EF6F4F7553C19648A11F1B172242F86C2FF07B11B291E3B7814E796E6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Targets
-
- Target grabber_1784597067.exe
- Size 16.3MB
- SHA256 925850149f996e4c5c26dc773946303c820cd45037a5da53ff5e16ba3c1876e8
- MD5 af0cdf7664a44bb14b7b25324239b5d8
- SHA1 da1c7b92311ee86b2b4e2d411bacae6a8cd65ac9
- SHA512 8055d6940f1478b86195e7a07d47780af558f015fed20152385e702d74adde22f64c626397cf17cdf149b6933c51039be1b0e9777dd14533ac1228ef7d999661
- SSDEEP 393216:dn7LMogIfUKOcFXEAphVtnIwQSg+SPm5WtTIvF7dvplk:t4o58KPFRphDBo+PWtUvF7e
- TLSH T18C0733A8B2814EF6F4F7553C19648A11F1B172242F86C2FF07B11B291E3B7814E796E6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.
-
Enumerates processes with tasklist