General
- Target cs16_setup.exe
- Size 250.1MB
- Sample260916-mfj3wsts2r
- SHA256 a37ecda1069734cacbffb5244ee8e6365233cc56a81ad003e38c107305782ceb
- MD5 54dd94fbb3bda314be1942caee65f345
- SHA1 b24af6e765cd096bdddb9e672713ac46b5cdc104
- SHA512 0eb1c02e099e24f9da18454965382acf26ff8e5c7f8d10c81a424c4507d5b0c233cb48dbb38f0abd45bc108cf125cb0d9c4d82d10f1858ecefae0f4f955ec0db
- SSDEEP 6291456:st3xL61vK21HisYEZjknrVsYIHxVJzGdqRjiLC8kI8h:s3xu1vK21Qhnript6qV8RQ
- TLSH T114C83353729410ACE6761A30DD7565EC6ABBBF18AC3E881F12D4B44DDF722604E3B392
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Targets
-
- Target cs16_setup.exe
- Size 250.1MB
- SHA256 a37ecda1069734cacbffb5244ee8e6365233cc56a81ad003e38c107305782ceb
- MD5 54dd94fbb3bda314be1942caee65f345
- SHA1 b24af6e765cd096bdddb9e672713ac46b5cdc104
- SHA512 0eb1c02e099e24f9da18454965382acf26ff8e5c7f8d10c81a424c4507d5b0c233cb48dbb38f0abd45bc108cf125cb0d9c4d82d10f1858ecefae0f4f955ec0db
- SSDEEP 6291456:st3xL61vK21HisYEZjknrVsYIHxVJzGdqRjiLC8kI8h:s3xu1vK21Qhnript6qV8RQ
- TLSH T114C83353729410ACE6761A30DD7565EC6ABBBF18AC3E881F12D4B44DDF722604E3B392
- MD5 SHA1 SHA512 SSDEEP TLSH
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.