General
- Target 3932593f04ece213879395e726b57bc99b500e190f03f335cbe4a07c01c8cdb7
- Size 3.5MB
- Sample260830-1knhrssxby
- SHA256 3932593f04ece213879395e726b57bc99b500e190f03f335cbe4a07c01c8cdb7
- MD5 fd105055e4c9f55b0a1e887a2d010166
- SHA1 483c42910c1a13643b1f5979429239daa9547c85
- SHA512 ee89578818688a1a2eaf6a72c0ecffb053e01934a13549017f7ce69606f75f75fa84de4d164d2310cd9069914bbbc03de842e2886566dc1b9b6718199a616c37
- SSDEEP 98304:nazqPhpbXZ5h+dBOe9SrNarTL/st25D+vrK8Et:nazmRXZ5kdBZScXTMMKvE
- TLSH T1000633A063932081EBBC86320B7FB52530CEDDB540AEEFDE3935989FD58995ACC150E5
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Targets
-
- Target 3932593f04ece213879395e726b57bc99b500e190f03f335cbe4a07c01c8cdb7
- Size 3.5MB
- SHA256 3932593f04ece213879395e726b57bc99b500e190f03f335cbe4a07c01c8cdb7
- MD5 fd105055e4c9f55b0a1e887a2d010166
- SHA1 483c42910c1a13643b1f5979429239daa9547c85
- SHA512 ee89578818688a1a2eaf6a72c0ecffb053e01934a13549017f7ce69606f75f75fa84de4d164d2310cd9069914bbbc03de842e2886566dc1b9b6718199a616c37
- SSDEEP 98304:nazqPhpbXZ5h+dBOe9SrNarTL/st25D+vrK8Et:nazmRXZ5kdBZScXTMMKvE
- TLSH T1000633A063932081EBBC86320B7FB52530CEDDB540AEEFDE3935989FD58995ACC150E5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-
Suspicious use of SetThreadContext