General
- Target RAMDisk.7z
- Size 4.0MB
- Sample260819-mf68eshl3z
- SHA256 8aa5d80d4b37158489dc5d35a67fdd0c00491a42735d68ee97568df4a991d07c
- MD5 df1f91a8a0eb12b68e6c53248679731b
- SHA1 172b2bacafc79561cc16e312a6e4f770e519f7b5
- SHA512 87f069200d351eed976e05d7acc86f359ccc7ece42adfac7960ef0b9f9032af95b9c2fffd374a49ea296c9b62436670ecbf8bb885bf05150a329718b24b2e5b1
- SSDEEP 98304:AThqIJPIEmlGQTnYWY7K2Heh9hOAqEjbYAbb97kpYXgEKJm4rozs:oc2hmE+nYWY7SHOAqE3Th4kA
- TLSH T1B016331F1C177FA39E8C631BE585A1B5A84EDCBE32A944A4CF5FACE0C4156934F92027
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Targets
-
- Target RAMDisk.exe
- Size 4.1MB
- SHA256 5a7a49330a3b71fe40fcd377502df08ba0d222bbcfa6264e6834389b58b2873a
- MD5 d069e9b14a6873c87df7367f10bc168c
- SHA1 ec43b204b8b215f7a6c142cbc6121dd23f564861
- SHA512 4c03a67156205deda14848f9f873c4abb5c4972e96f2787c13334b0e6f4d5993ac55e542147dbb5d8913e368cb144b157226169eadf0703d7258004aa3b1f201
- SSDEEP 98304:FAvfKgQ9gPqmk+yDikCgT6n5xfSxuXWV1H/X6D0Gs8:FAvyTyqi8CgToxB2ZXws8
- TLSH T132163302B2D70432F5AA9AB88D554980AC1FBD9F11FA51263D3CF90E1ABD9C68C75F31
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory