General
- Target setup.exe
- Size 5.6MB
- Sample260814-fg3hasvyas
- SHA256 1e4fbf4ea1f3b5378ed65f3aa2b4df01d42b186aa9034bd5afaa29dfdc288f3c
- MD5 a7d8de06eb27eef82a720bc876dbf478
- SHA1 52b9ae1e650af50dac3658b7236c62f3994efdf6
- SHA512 4fefc24aef222f65f4611fee45696dfa611497c535c26be45e5fd167f206564c634c934fd08f40debad61af2785cfaa40b0f61334d2c5423a2ba253c422c2166
- SSDEEP 98304:vsN/vTgAKomegIGkneatkd2EqD1Qdjx7nxO8QlN:v4/vTgGNq7atkRmo8
- TLSH T1585633CAF3C7C179E5120C38292BA06CBE523DE915E6706D5EF8CB8F0A7E0C560B5919
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Targets
-
- Target setup.exe
- Size 5.6MB
- SHA256 1e4fbf4ea1f3b5378ed65f3aa2b4df01d42b186aa9034bd5afaa29dfdc288f3c
- MD5 a7d8de06eb27eef82a720bc876dbf478
- SHA1 52b9ae1e650af50dac3658b7236c62f3994efdf6
- SHA512 4fefc24aef222f65f4611fee45696dfa611497c535c26be45e5fd167f206564c634c934fd08f40debad61af2785cfaa40b0f61334d2c5423a2ba253c422c2166
- SSDEEP 98304:vsN/vTgAKomegIGkneatkd2EqD1Qdjx7nxO8QlN:v4/vTgGNq7atkRmo8
- TLSH T1585633CAF3C7C179E5120C38292BA06CBE523DE915E6706D5EF8CB8F0A7E0C560B5919
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.