General
- Target SafeW_3.7.8.exe
- Size 39.8MB
- Sample260905-s3t49st1hs
- SHA256 5c42862b3622639903c7dab1127a4ffb07f4ddc18140a378f2581eaffa7aa290
- MD5 25bc57a16d7b38e77a0fea932b32591c
- SHA1 39c057fdad0edddf8ab19fd612d0001bc93f68e4
- SHA512 b5001391a240f04eed0bbfa7fadf3b34d6e9920ef2bfde883383a2ffb9fb977d19907027e7c3708eb1a0ae93fd45869b5db74e9251934cab8f83ec724167d12e
- SSDEEP 786432:24mXU5x33QUp83wlGOQbjPmtGU/mxPUI/5BRG3:7mXU5Zt6bjPCd8PUIhW3
- TLSH T1769733977A8B953BE82E0B390772B00594F72E2164236D168EE8F5ECCE351615E3DE13
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Targets
-
- Target SafeW_3.7.8.exe
- Size 39.8MB
- SHA256 5c42862b3622639903c7dab1127a4ffb07f4ddc18140a378f2581eaffa7aa290
- MD5 25bc57a16d7b38e77a0fea932b32591c
- SHA1 39c057fdad0edddf8ab19fd612d0001bc93f68e4
- SHA512 b5001391a240f04eed0bbfa7fadf3b34d6e9920ef2bfde883383a2ffb9fb977d19907027e7c3708eb1a0ae93fd45869b5db74e9251934cab8f83ec724167d12e
- SSDEEP 786432:24mXU5x33QUp83wlGOQbjPmtGU/mxPUI/5BRG3:7mXU5Zt6bjPCd8PUIhW3
- TLSH T1769733977A8B953BE82E0B390772B00594F72E2164236D168EE8F5ECCE351615E3DE13
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.