General
- Target NemazingSetup.exe
- Size 10.7MB
- Sample260801-sh9zzscd69
- SHA256 91b0a34adf500cb7b31b071a57c683b4c52cf0cfa401b2bddaa583c38dd1b83d
- MD5 47a4f10653caa45da647751e82d6fccb
- SHA1 0d08ddf794f43f3dd5935da11b88e5181be9a111
- SHA512 8b23c50d1ef41d1a6669551b075a739a2b054fef2eee2bc81defcf91cf56f83fa596e814eb1d072b67db53befaa7e460bd70ee7673c8cd7bf992387359420b15
- SSDEEP 196608:aHMJGtrbu4iKkC6Imv9zzBHTzy/iDablKIfH:aH3rlkb9BHTzy/nK4H
- TLSH T123B6233FB24B753EE06E5A357A72E610593B7A1168178C1696F0C88CCF164B02E3F796
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Targets
-
- Target NemazingSetup.exe
- Size 10.7MB
- SHA256 91b0a34adf500cb7b31b071a57c683b4c52cf0cfa401b2bddaa583c38dd1b83d
- MD5 47a4f10653caa45da647751e82d6fccb
- SHA1 0d08ddf794f43f3dd5935da11b88e5181be9a111
- SHA512 8b23c50d1ef41d1a6669551b075a739a2b054fef2eee2bc81defcf91cf56f83fa596e814eb1d072b67db53befaa7e460bd70ee7673c8cd7bf992387359420b15
- SSDEEP 196608:aHMJGtrbu4iKkC6Imv9zzBHTzy/iDablKIfH:aH3rlkb9BHTzy/nK4H
- TLSH T123B6233FB24B753EE06E5A357A72E610593B7A1168178C1696F0C88CCF164B02E3F796
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.