General
- Target LiquidExecutorSetup.exe
- Size 1.7MB
- Sample260815-xvrrdsszbs
- SHA256 c4e104ecff6686f2ce08b35f80d56f2a40b7fd15aefcea2c7a27efe3aa0c6e78
- MD5 a10bca4fad4fe86c282acabab792f4c3
- SHA1 fefaad8d53ead3b3450dc1d5f269cc1f3572865a
- SHA512 5757fd938a578678b08b3c4cf5500ac1485d098989a279ef15415de093a81869d86c2d7a358034fe089d126d3d39292b2f1b3c493da012c4d8b6204b892dc20c
- SSDEEP 24576:M7FUDowAyrTVE3U5FWQGNF4KMk2UCEm/QnYq2KUv8Pi:MBuZrEUIF478CNQYqT5Pi
- TLSH T13A85BE3FB268A53EC4AE0B3149739260997B7E61B81A8C1F17F0390DCF765601E3BA55
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Targets
-
- Target LiquidExecutorSetup.exe
- Size 1.7MB
- SHA256 c4e104ecff6686f2ce08b35f80d56f2a40b7fd15aefcea2c7a27efe3aa0c6e78
- MD5 a10bca4fad4fe86c282acabab792f4c3
- SHA1 fefaad8d53ead3b3450dc1d5f269cc1f3572865a
- SHA512 5757fd938a578678b08b3c4cf5500ac1485d098989a279ef15415de093a81869d86c2d7a358034fe089d126d3d39292b2f1b3c493da012c4d8b6204b892dc20c
- SSDEEP 24576:M7FUDowAyrTVE3U5FWQGNF4KMk2UCEm/QnYq2KUv8Pi:MBuZrEUIF478CNQYqT5Pi
- TLSH T13A85BE3FB268A53EC4AE0B3149739260997B7E61B81A8C1F17F0390DCF765601E3BA55
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.