General
- Target balloons.exe
- Size 2.6MB
- Sample260804-s4ar1stdnb
- SHA256 ee38d2feb95a01c192ef7b60631b78e6feab9360a0af2fc2d0518c68a63686c6
- MD5 5778005be5e69e016e49baa8702cd73c
- SHA1 a4b617e3afa2b9c475bd6c5fd317bbd4df58245d
- SHA512 e29face35dcd2c3fdd76b573eb06f63738bb49eb075122302287bcacf5cdb624d69e3b3057c9bce45051c9e6c77f978fe63b370102fbcdfebfaa0d01b3947113
- SSDEEP 49152:vuI2hoWTrsvqclgLVMMw44eFU1ZfFA1MMMtlgFB53W:v5OhrsvVMMp44eO/fF64Q53W
- TLSH T132C5E13FB28B653EE06E5A367AB2E210543B7661A5138C5697F4C84CCF250702E3F796
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Malware Config
Targets
-
- Target balloons.exe
- Size 2.6MB
- SHA256 ee38d2feb95a01c192ef7b60631b78e6feab9360a0af2fc2d0518c68a63686c6
- MD5 5778005be5e69e016e49baa8702cd73c
- SHA1 a4b617e3afa2b9c475bd6c5fd317bbd4df58245d
- SHA512 e29face35dcd2c3fdd76b573eb06f63738bb49eb075122302287bcacf5cdb624d69e3b3057c9bce45051c9e6c77f978fe63b370102fbcdfebfaa0d01b3947113
- SSDEEP 49152:vuI2hoWTrsvqclgLVMMw44eFU1ZfFA1MMMtlgFB53W:v5OhrsvVMMp44eO/fF64Q53W
- TLSH T132C5E13FB28B653EE06E5A367AB2E210543B7661A5138C5697F4C84CCF250702E3F796
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.