General
- Target bc07a970f55304e6ded2fe94a1083d55695afccc889fdee44eeaea66c41f2be7
- Size 3.8MB
- Sample260831-vx2m9sxdma
- SHA256 bc07a970f55304e6ded2fe94a1083d55695afccc889fdee44eeaea66c41f2be7
- MD5 e4a9135bffbc91e13a6845c3d8f1dbca
- SHA1 483897e600ece0ea7f92e29ede0e298e547fc6c4
- SHA512 f10b68ac6576db96a3dda4c8b2c6128e8f385650ce3e36905e6717aec172f67c293f4a757705ac2f276228866be838ee7a3295ef3dc3054f9929cacf5a445e05
- SSDEEP 98304:uZuarCtWyX0p+tUFHtrXCDHGkSn8b+vPdl:uZHrzyG+2aDHGkS8Cj
- TLSH T15E0633A60B9F1D89CE2DA07349505E1D87C26C9C0B298257E073F609FD9D3251FA2FE8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Targets
-
- Target bc07a970f55304e6ded2fe94a1083d55695afccc889fdee44eeaea66c41f2be7
- Size 3.8MB
- SHA256 bc07a970f55304e6ded2fe94a1083d55695afccc889fdee44eeaea66c41f2be7
- MD5 e4a9135bffbc91e13a6845c3d8f1dbca
- SHA1 483897e600ece0ea7f92e29ede0e298e547fc6c4
- SHA512 f10b68ac6576db96a3dda4c8b2c6128e8f385650ce3e36905e6717aec172f67c293f4a757705ac2f276228866be838ee7a3295ef3dc3054f9929cacf5a445e05
- SSDEEP 98304:uZuarCtWyX0p+tUFHtrXCDHGkSn8b+vPdl:uZHrzyG+2aDHGkS8Cj
- TLSH T15E0633A60B9F1D89CE2DA07349505E1D87C26C9C0B298257E073F609FD9D3251FA2FE8
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-
Suspicious use of SetThreadContext