General
- Target AntiFagban_Setup.exe
- Size 2.1MB
- Sample260820-bwcszazyb1
- SHA256 898a8593223361eae1104dbfb64402602289ddcb1c0bb1a98ea9e2b901aae1f9
- MD5 0dcb9667e574018bfa0cfe427f00e904
- SHA1 b93a6491d5736513e9f5f81f56785e81c9b6e2f4
- SHA512 127f4b8e5c4c8522c929934f26aaa39ca6033f5973ca1aedcabc02d9cd1ad19bc9e262f1e412c4ffe7b4dcdfaa5b01ddae5371a3f30b95997538821c033af606
- SSDEEP 24576:TXVrSLScusMmOvjjhzvLSIMW3Ajxp9u8x/37Mfs/cwHbz4pj8C1j2mk3Ua5fiJ94:4uI2h3o1Hu8x/3ok9bz4pICVmkZ866XP
- TLSH T1E4A5D03FF28B653EE06A163A7A72A110983B7A6165134C1696FCF88CCF255701D3E787
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Targets
-
- Target AntiFagban_Setup.exe
- Size 2.1MB
- SHA256 898a8593223361eae1104dbfb64402602289ddcb1c0bb1a98ea9e2b901aae1f9
- MD5 0dcb9667e574018bfa0cfe427f00e904
- SHA1 b93a6491d5736513e9f5f81f56785e81c9b6e2f4
- SHA512 127f4b8e5c4c8522c929934f26aaa39ca6033f5973ca1aedcabc02d9cd1ad19bc9e262f1e412c4ffe7b4dcdfaa5b01ddae5371a3f30b95997538821c033af606
- SSDEEP 24576:TXVrSLScusMmOvjjhzvLSIMW3Ajxp9u8x/37Mfs/cwHbz4pj8C1j2mk3Ua5fiJ94:4uI2h3o1Hu8x/3ok9bz4pICVmkZ866XP
- TLSH T1E4A5D03FF28B653EE06A163A7A72A110983B7A6165134C1696FCF88CCF255701D3E787
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.