General
- Target mc_installer.exe
- Size 324KB
- Sample260828-azr7dsbd89
- SHA256 cc07a04e1bf966f1761c878f27d8583cde2f08d083e1c9fd87d3c72f4a1d562c
- MD5 f7934a8276202917a1874e9e918669ce
- SHA1 4c4cda827d8e1caac5d5a156c1a87ba7439d24e4
- SHA512 442aa41f6343cfb86a31b0819d75479531c8b690fce4bf040e0225cb1c20858aced2026138aa3ebaaec848611a9916fc1f972fbc342242748627017c6ecff92d
- SSDEEP 6144:iSasDB81fc0DHbabT778+4oYC4XOUUwUHdj:iSzB8CEHbI8+4T
- TLSH T15D647D3BF7A344F8C16BC17497D3D7B26071FC1803246A5F16A5D3363E26A940FAA968
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Targets
-
- Target mc_installer.exe
- Size 324KB
- SHA256 cc07a04e1bf966f1761c878f27d8583cde2f08d083e1c9fd87d3c72f4a1d562c
- MD5 f7934a8276202917a1874e9e918669ce
- SHA1 4c4cda827d8e1caac5d5a156c1a87ba7439d24e4
- SHA512 442aa41f6343cfb86a31b0819d75479531c8b690fce4bf040e0225cb1c20858aced2026138aa3ebaaec848611a9916fc1f972fbc342242748627017c6ecff92d
- SSDEEP 6144:iSasDB81fc0DHbabT778+4oYC4XOUUwUHdj:iSzB8CEHbI8+4T
- TLSH T15D647D3BF7A344F8C16BC17497D3D7B26071FC1803246A5F16A5D3363E26A940FAA968
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Downloads MZ/PE file
-
Executes dropped EXE