General
- Target pterm-5.0.8.exe
- Size 1.8MB
- Sample260722-3dsv1swgre
- SHA256 5f1a035ac15f7e2d4fa31217a84eb0e9c5e03e4f0b1712afe9ccbed8229df16a
- MD5 2c49b14e82c2f775b8f6217b53301c55
- SHA1 988638af07a1c0da6dee3b6d34255b7289f751a0
- SHA512 42d7c7924bbebb5b547abc5cc8d2fc7ff23789c9b206bf8197fb8d9896abdcf970f3195666d78569324dd804860d6c89e860f25471102577487881bad331de8f
- SSDEEP 49152:194fYRASrSYqRRZYMeGMt17aYpCUOPlkjEzMX4m:TiYyYqD6vLt1WY6NGf4m
- TLSH T1C8953342E9D08CB5D0955AF95867BC00934FFE58F836A410BAAC48BCBF0B6B781057DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Targets
-
- Target pterm-5.0.8.exe
- Size 1.8MB
- SHA256 5f1a035ac15f7e2d4fa31217a84eb0e9c5e03e4f0b1712afe9ccbed8229df16a
- MD5 2c49b14e82c2f775b8f6217b53301c55
- SHA1 988638af07a1c0da6dee3b6d34255b7289f751a0
- SHA512 42d7c7924bbebb5b547abc5cc8d2fc7ff23789c9b206bf8197fb8d9896abdcf970f3195666d78569324dd804860d6c89e860f25471102577487881bad331de8f
- SSDEEP 49152:194fYRASrSYqRRZYMeGMt17aYpCUOPlkjEzMX4m:TiYyYqD6vLt1WY6NGf4m
- TLSH T1C8953342E9D08CB5D0955AF95867BC00934FFE58F836A410BAAC48BCBF0B6B781057DA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.