General
- Target Lightshot.exe
- Size 75.3MB
- Sample260723-lqbc3aveqd
- SHA256 c9508dd5405fe495cd4892075014481ae7fa17cdfb2975a8b03e7e774ff717d8
- MD5 3c15c6396055de2e5ee228a34ce0e783
- SHA1 b0518743dde4f1e0af1a8c98e85da897920d11aa
- SHA512 feedce5c52c47b9dbb20ead928c4753154f3e5f339d7a71d98c8827dbab86b1447cdfd1f6762019a030f5cfdfb4e630160f9e147a8ded12427bb389674b67178
- SSDEEP 1572864:R3t2nwDZWwZwPEtGKZvszIWG11+SZQJaWWgJdjzmZAmh2SZ:R3tA85ZNtGKZ0zS15KaWxdjKZ8k
- TLSH T12208338228DA52E8C8DF0F045587128F64F065EA4EBEAD5E77C15C035F21EE7588EA37
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Targets
-
- Target Lightshot.exe
- Size 75.3MB
- SHA256 c9508dd5405fe495cd4892075014481ae7fa17cdfb2975a8b03e7e774ff717d8
- MD5 3c15c6396055de2e5ee228a34ce0e783
- SHA1 b0518743dde4f1e0af1a8c98e85da897920d11aa
- SHA512 feedce5c52c47b9dbb20ead928c4753154f3e5f339d7a71d98c8827dbab86b1447cdfd1f6762019a030f5cfdfb4e630160f9e147a8ded12427bb389674b67178
- SSDEEP 1572864:R3t2nwDZWwZwPEtGKZvszIWG11+SZQJaWWgJdjzmZAmh2SZ:R3tA85ZNtGKZ0zS15KaWxdjKZ8k
- TLSH T12208338228DA52E8C8DF0F045587128F64F065EA4EBEAD5E77C15C035F21EE7588EA37
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Loads dropped DLL
-
Drops file in System32 directory
-
Suspicious use of NtSetInformationThreadHideFromDebugger