General
- Target f452344069ead6a0a23bb1d7de93eace2ef5a795ae7dd788e9758d5a5b03c475
- Size 4.9MB
- Sample260826-pc5xasv1fs
- SHA256 f452344069ead6a0a23bb1d7de93eace2ef5a795ae7dd788e9758d5a5b03c475
- MD5 d0b8e6dd31ab8dd7b6b25fa92699f7b1
- SHA1 47e7919047d4b3cb91e6b5b229711a83958c362c
- SHA512 cb834f96b7b3aeee316a14c2491e1206ad16b8c35760f698879a20a2a8084317ae592f718d6bc1e328c5c40a8684a017b693b59a5b695d0c4c61a39432afa980
- SSDEEP 98304:kgQJew1aINuSJGyiOuuEvEFgFcagT5oZKRILTJn2YAWoYSi7my:6c6ru8+hgT55eRb93Spy
- TLSH T1A136336EE9E044E0D82224F9F69D73939276FE53387DAD5789E8DA4D4B3AC90081DF40
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Targets
-
- Target f452344069ead6a0a23bb1d7de93eace2ef5a795ae7dd788e9758d5a5b03c475
- Size 4.9MB
- SHA256 f452344069ead6a0a23bb1d7de93eace2ef5a795ae7dd788e9758d5a5b03c475
- MD5 d0b8e6dd31ab8dd7b6b25fa92699f7b1
- SHA1 47e7919047d4b3cb91e6b5b229711a83958c362c
- SHA512 cb834f96b7b3aeee316a14c2491e1206ad16b8c35760f698879a20a2a8084317ae592f718d6bc1e328c5c40a8684a017b693b59a5b695d0c4c61a39432afa980
- SSDEEP 98304:kgQJew1aINuSJGyiOuuEvEFgFcagT5oZKRILTJn2YAWoYSi7my:6c6ru8+hgT55eRb93Spy
- TLSH T1A136336EE9E044E0D82224F9F69D73939276FE53387DAD5789E8DA4D4B3AC90081DF40
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-
Suspicious use of SetThreadContext