General
- Target lazarus-2.2.2-fpc-3.2.2-win64.exe
- Size 192.6MB
- Sample260723-jfzlssaa97
- SHA256 3aecce3f12f9c1824dcb149142abfbaee4e162a2624e62cb0ecd9b7c2142b7e3
- MD5 2a53e0be8458c4f24f1d9db0e531f32c
- SHA1 7683b0a949d332d4e2fa89f6ed446bcef3e4c9b2
- SHA512 c8aeb04bc82ddf5ec439193cd545351a5dc4c197bf3aa86c4bed4efbdc3cd7d27745a484655b6976e9378b0be314398e9f425c9012a538ef617457a8b51662cf
- SSDEEP 6291456:t8KinM26ltbyShgFkNJ3YQEsWRMlJPFN0E:tDinM2etbyWgcJIqmGeE
- TLSH T182A833F2E789666BDE5EC33A9ADF3201BF58837268E4C41F9CF9D62E1451BC025B0650
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Targets
-
- Target lazarus-2.2.2-fpc-3.2.2-win64.exe
- Size 192.6MB
- SHA256 3aecce3f12f9c1824dcb149142abfbaee4e162a2624e62cb0ecd9b7c2142b7e3
- MD5 2a53e0be8458c4f24f1d9db0e531f32c
- SHA1 7683b0a949d332d4e2fa89f6ed446bcef3e4c9b2
- SHA512 c8aeb04bc82ddf5ec439193cd545351a5dc4c197bf3aa86c4bed4efbdc3cd7d27745a484655b6976e9378b0be314398e9f425c9012a538ef617457a8b51662cf
- SSDEEP 6291456:t8KinM26ltbyShgFkNJ3YQEsWRMlJPFN0E:tDinM2etbyWgcJIqmGeE
- TLSH T182A833F2E789666BDE5EC33A9ADF3201BF58837268E4C41F9CF9D62E1451BC025B0650
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory