General
- Target Setup Archetype Rabea X v1.0.1.exe
- Size 477.7MB
- Sample260820-seflzasyey
- SHA256 dc642b463460e48754cb216084df872cbb20645545ef5b8c756453ea4b0fe6ce
- MD5 d380fd5a01b9e136ebadc0f4a1fd75fd
- SHA1 4d85d3bdf7b072f0116f0205c17c13fe79b70fa2
- SHA512 f619896663fea0969920469b76148b71e58b8d42419b254de8b286648fa38f7e191da54ecc1b0dd7fbde2ee64728054cd7498ef1328077e345da4b09397398a2
- SSDEEP 6291456:ddH1VHXKIWBXH1VHXKIWRxH1VHXKIWl9QnH1VHXKIW7cd:ddTKzBXTKzRxTKzl9QnTKz7cd
- TLSH T1C639F1E5B4FA454ACEAAC63CBA81942FD3303D85676089E3307C62452F736C509FB6B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Targets
-
- Target Setup Archetype Rabea X v1.0.1.exe
- Size 477.7MB
- SHA256 dc642b463460e48754cb216084df872cbb20645545ef5b8c756453ea4b0fe6ce
- MD5 d380fd5a01b9e136ebadc0f4a1fd75fd
- SHA1 4d85d3bdf7b072f0116f0205c17c13fe79b70fa2
- SHA512 f619896663fea0969920469b76148b71e58b8d42419b254de8b286648fa38f7e191da54ecc1b0dd7fbde2ee64728054cd7498ef1328077e345da4b09397398a2
- SSDEEP 6291456:ddH1VHXKIWBXH1VHXKIWRxH1VHXKIWl9QnH1VHXKIW7cd:ddTKzBXTKzRxTKzl9QnTKz7cd
- TLSH T1C639F1E5B4FA454ACEAAC63CBA81942FD3303D85676089E3307C62452F736C509FB6B5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.