General
- Target YuriWarnoToolkit.exe
- Size 7.1MB
- Sample260828-vreasa1dlb
- SHA256 ab8d22f46d97f11d292c5d64b8a8fd882fd1f50696e9403b1120e6834d292f01
- MD5 4ee4ac9b7e3af1c99476efab035451bf
- SHA1 6b0cf08102838a25f2f14e7ec0a99aedf75f58fa
- SHA512 7f9caeaab8ce0983058e4e66d106d79674e083daaca24a299ffe58172b7a498b2f3dd60357f0383a3235fa1d6de67c18c8d431f88048a477a74b69acfc4950f6
- SSDEEP 196608:qqpi8mj6ok9+riHrmQEXGsoD99WD33UqP:qqpQg9zHrm0mrU
- TLSH T1C376AF8499E1DF31CB9D2A37203282187773C10493AFFF56051ED6B32E666D85E5AE0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Targets
-
- Target YuriWarnoToolkit.exe
- Size 7.1MB
- SHA256 ab8d22f46d97f11d292c5d64b8a8fd882fd1f50696e9403b1120e6834d292f01
- MD5 4ee4ac9b7e3af1c99476efab035451bf
- SHA1 6b0cf08102838a25f2f14e7ec0a99aedf75f58fa
- SHA512 7f9caeaab8ce0983058e4e66d106d79674e083daaca24a299ffe58172b7a498b2f3dd60357f0383a3235fa1d6de67c18c8d431f88048a477a74b69acfc4950f6
- SSDEEP 196608:qqpi8mj6ok9+riHrmQEXGsoD99WD33UqP:qqpQg9zHrm0mrU
- TLSH T1C376AF8499E1DF31CB9D2A37203282187773C10493AFFF56051ED6B32E666D85E5AE0E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.