General
- Target Rsys setup X pro.exe
- Size 1.8MB
- Sample260727-cxb4havarc
- SHA256 e090e2433aa1cf6364a41cc6a897461a25f6e8abafe19f503bf65e19192083e0
- MD5 d66abb5f8ed39dfe1708f3613f3548b8
- SHA1 f43bfffd0c618efc290bdf6aec8f645a31da0777
- SHA512 bf22732e900d6da6b433dab922878b6bbf527d8bbc484ec780740edcf2e760a094686e24f90e6db5e1c605830a659df9b5aef0029b86f9b351515b3092b37f06
- SSDEEP 24576:waE+hTNrCHtLfTfuM7Djr5QpYrao2rupZdH1LDHH5JaFMWHIta3+8Fk86Y1olVYd:0+MRvHJ4Ju+ekQoEcx
- TLSH T19385BF23F2CBE03EE45E0B3705B2A15494FBAA256523AD1786ECB49CCF751601E3E647
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Targets
-
- Target Rsys setup X pro.exe
- Size 1.8MB
- SHA256 e090e2433aa1cf6364a41cc6a897461a25f6e8abafe19f503bf65e19192083e0
- MD5 d66abb5f8ed39dfe1708f3613f3548b8
- SHA1 f43bfffd0c618efc290bdf6aec8f645a31da0777
- SHA512 bf22732e900d6da6b433dab922878b6bbf527d8bbc484ec780740edcf2e760a094686e24f90e6db5e1c605830a659df9b5aef0029b86f9b351515b3092b37f06
- SSDEEP 24576:waE+hTNrCHtLfTfuM7Djr5QpYrao2rupZdH1LDHH5JaFMWHIta3+8Fk86Y1olVYd:0+MRvHJ4Ju+ekQoEcx
- TLSH T19385BF23F2CBE03EE45E0B3705B2A15494FBAA256523AD1786ECB49CCF751601E3E647
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops startup file
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.