General
- Target METROCRAFT.exe
- Size 62.9MB
- Sample260724-taqf2shd35
- SHA256 1b15b9b49f934770684aefe1315828981554ec363c11f334d96431c037eba69f
- MD5 8078e3b7957e3d106495d3b6c0bd3c76
- SHA1 c4d7437ca654a4346557311e33fe8aba57b548a2
- SHA512 6c18f92fae73cd58353df03632b7f21c2599f4696b4972f2ab56a124b2fcf80a402695a67b836dd49f80e09c7e5fe7a79446f11cc04cbeb8f4c9d20cb2e44b29
- SSDEEP 1572864:CBJbQtNmJOrB3SE9qKzUiWBQnF4MsUHRDbR5rb91z82+tjMRdCIU:CBJ3JFEEKzRWBQnF4xUH9R5/zQtd
- TLSH T167E7333FA1CB123EF4AE5A753DB2F20040376A6166078D16DAE4C95CDB628721D1FB87
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Targets
-
- Target METROCRAFT.exe
- Size 62.9MB
- SHA256 1b15b9b49f934770684aefe1315828981554ec363c11f334d96431c037eba69f
- MD5 8078e3b7957e3d106495d3b6c0bd3c76
- SHA1 c4d7437ca654a4346557311e33fe8aba57b548a2
- SHA512 6c18f92fae73cd58353df03632b7f21c2599f4696b4972f2ab56a124b2fcf80a402695a67b836dd49f80e09c7e5fe7a79446f11cc04cbeb8f4c9d20cb2e44b29
- SSDEEP 1572864:CBJbQtNmJOrB3SE9qKzUiWBQnF4MsUHRDbR5rb91z82+tjMRdCIU:CBJ3JFEEKzRWBQnF4xUH9R5/zQtd
- TLSH T167E7333FA1CB123EF4AE5A753DB2F20040376A6166078D16DAE4C95CDB628721D1FB87
- MD5 SHA1 SHA512 SSDEEP TLSH
-
A potential corporate email address has been identified in the URL: [email protected]
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Probable phishing domain