General
- Target Cableguys ShaperBox 3.6.1.exe
- Size 20.4MB
- Sample260806-d2dnkaxwh1
- SHA256 35208e4dfd7adb69d9855c51994c5659cdd85f79cc2f04606f3d6f679d4746f2
- MD5 0bf7689fddddb00587155adf97142b43
- SHA1 3becd264776c0855b09824350b906e3864009205
- SHA512 34ec846e083d3c0ecd4756bd402fa0554ab9aa72773cb46e41a9b5a208c87fd28403aac822e680c8ec0a03c78d7abc6e2e23ddb6f74f1a74ffd02f234e56516a
- SSDEEP 393216:ecz5hxL8pHGmgjMUC2N0QNMg3wyWbNTXLkS+kT88ezo2dzjD8El+IJoWnI8PlHN:JnxL3M2RMg3T3SpeM2dzjucL7t
- TLSH T15627336AB21FA13DC86A57354573D6109A3B7F65B8368C2F46F4380CCF324C45A3B6A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Targets
-
- Target Cableguys ShaperBox 3.6.1.exe
- Size 20.4MB
- SHA256 35208e4dfd7adb69d9855c51994c5659cdd85f79cc2f04606f3d6f679d4746f2
- MD5 0bf7689fddddb00587155adf97142b43
- SHA1 3becd264776c0855b09824350b906e3864009205
- SHA512 34ec846e083d3c0ecd4756bd402fa0554ab9aa72773cb46e41a9b5a208c87fd28403aac822e680c8ec0a03c78d7abc6e2e23ddb6f74f1a74ffd02f234e56516a
- SSDEEP 393216:ecz5hxL8pHGmgjMUC2N0QNMg3wyWbNTXLkS+kT88ezo2dzjD8El+IJoWnI8PlHN:JnxL3M2RMg3T3SpeM2dzjucL7t
- TLSH T15627336AB21FA13DC86A57354573D6109A3B7F65B8368C2F46F4380CCF324C45A3B6A6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.