General
- Target setup.exe
- Size 5.3MB
- Sample260814-qnmersaa82
- SHA256 2ca594730c1487063a022f3039aad37c547baabd460fb872882a4b6e4f623c23
- MD5 4f4fce197f80c435a86f4586fb0d2c7b
- SHA1 0268680819bf325a4966aa03c8ba9f0b10ef96bc
- SHA512 01a9e1e5f25d476e893aa39b7874e68f08983a2ec45faba11b1afa1e9ce97d15828dc53bf5651beb76c8e5e69a51917acfa84a84224ccbe80ed0477681ff3061
- SSDEEP 98304:Vf7wCQInrje/CAVMJy1WGsF3V/gdQer9qlkb5RSCN:Vfn6/VSlGC3V/gdQITDSI
- TLSH T114463301E383153AE46009785D67E5F46D12F7FA2AD060295EBCDB8F0A79183BDB76B0
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Targets
-
- Target setup.exe
- Size 5.3MB
- SHA256 2ca594730c1487063a022f3039aad37c547baabd460fb872882a4b6e4f623c23
- MD5 4f4fce197f80c435a86f4586fb0d2c7b
- SHA1 0268680819bf325a4966aa03c8ba9f0b10ef96bc
- SHA512 01a9e1e5f25d476e893aa39b7874e68f08983a2ec45faba11b1afa1e9ce97d15828dc53bf5651beb76c8e5e69a51917acfa84a84224ccbe80ed0477681ff3061
- SSDEEP 98304:Vf7wCQInrje/CAVMJy1WGsF3V/gdQer9qlkb5RSCN:Vfn6/VSlGC3V/gdQITDSI
- TLSH T114463301E383153AE46009785D67E5F46D12F7FA2AD060295EBCDB8F0A79183BDB76B0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.