General
- Target RSMB-TWIXTOR-EFXN13OFX-13.0.3.CE.exe
- Size 19.1MB
- Sample260730-sffclazgnc
- SHA256 f694fd35cd33ed67ce71eeda8d9de317dc80ce8779b7072732ed2dedc3a2719c
- MD5 a288824e477ca119a89a201af876b856
- SHA1 d94e42dd3f4fa143d11b836bd4298101ddc68119
- SHA512 9d8a62787fe4e005304cd79a4ccca54809cca9bd9e87e7fb77c6a4c286aec8707d20d98fe24f71a22bf06199c3ee9e742faa6d7658b24bf62e8237310e1eb847
- SSDEEP 393216:jMq39nyc6iHTYo1UG1m0cl/2BifAr/hEWsxnMR:Imnj6+Yo1UG1ENorZD
- TLSH T14B1733A2A3D448BEF6E1CB754994A1202D2179B6DBE37AC73D38DF0F08B46905D31B58
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Targets
-
- Target RSMB-TWIXTOR-EFXN13OFX-13.0.3.CE.exe
- Size 19.1MB
- SHA256 f694fd35cd33ed67ce71eeda8d9de317dc80ce8779b7072732ed2dedc3a2719c
- MD5 a288824e477ca119a89a201af876b856
- SHA1 d94e42dd3f4fa143d11b836bd4298101ddc68119
- SHA512 9d8a62787fe4e005304cd79a4ccca54809cca9bd9e87e7fb77c6a4c286aec8707d20d98fe24f71a22bf06199c3ee9e742faa6d7658b24bf62e8237310e1eb847
- SSDEEP 393216:jMq39nyc6iHTYo1UG1m0cl/2BifAr/hEWsxnMR:Imnj6+Yo1UG1ENorZD
- TLSH T14B1733A2A3D448BEF6E1CB754994A1202D2179B6DBE37AC73D38DF0F08B46905D31B58
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.