General
- Target stardock.zip
- Size 142.9MB
- Sample260803-nef6aahn5s
- SHA256 1f43a54ab5b9d0a10785fae42655df5caaf0ced2f683dde0dddcc4a8117cccfe
- MD5 51c38000b16bfe7c99871f17bcea8509
- SHA1 85aa537ea0dc8acfd756a422e3505d9d1d2e01f5
- SHA512 0c6fd6a1eacee03afcd1ebf12aa81d31347dbc508ee89b2d712cf72d8f458f66b9549a0defb815f07aff64874919a93eea49b2fd87e904c70904a23e7573ed08
- SSDEEP 3145728:nD8kQonDrbhW+zwhf91UiTgGrXYBxquhNqqCkeSeZw3QqL7PuU:Iunx4f91UiTVoBouPq4oy3QwmU
- TLSH T1566833414C3D2FDDE26C3E1D49B2696770AF790073FD40794BB648A6222F41AC66EE8D
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Targets
-
- Target stardock.zip
- Size 142.9MB
- SHA256 1f43a54ab5b9d0a10785fae42655df5caaf0ced2f683dde0dddcc4a8117cccfe
- MD5 51c38000b16bfe7c99871f17bcea8509
- SHA1 85aa537ea0dc8acfd756a422e3505d9d1d2e01f5
- SHA512 0c6fd6a1eacee03afcd1ebf12aa81d31347dbc508ee89b2d712cf72d8f458f66b9549a0defb815f07aff64874919a93eea49b2fd87e904c70904a23e7573ed08
- SSDEEP 3145728:nD8kQonDrbhW+zwhf91UiTgGrXYBxquhNqqCkeSeZw3QqL7PuU:Iunx4f91UiTVoBouPq4oy3QwmU
- TLSH T1566833414C3D2FDDE26C3E1D49B2696770AF790073FD40794BB648A6222F41AC66EE8D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
.NET Reactor proctector
Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory