General
- Target setup.exe
- Size 8.0MB
- Sample261002-xjsvbayvex
- SHA256 d26e191c5e6f0d14debcea73bf2cd79942b950c1f84c0a548780305d17910ea8
- MD5 1c99854cb5f79e2b8caf74a1eb5d3b5f
- SHA1 4a2e0f625414008f58a075da108fb3b222832fbb
- SHA512 e0fc815c44b79ac62bb6efeae2b17e1f02f9f847d3361391847186b79dd7e672e667d977ba5f4721721e67bdfea9b1025820640024bfbe5b5e36a2d74a980777
- SSDEEP 196608:dvtAZj41WJ6pzqZjwT6p9FQxcwqsJQW+zG:tKZ9JozqZjWKSxcwqoQnzG
- TLSH T148863302A783887DF85809B96C929C88AD66778635D538523FFCCF0E09BEBC735355A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Targets
-
- Target setup.exe
- Size 8.0MB
- SHA256 d26e191c5e6f0d14debcea73bf2cd79942b950c1f84c0a548780305d17910ea8
- MD5 1c99854cb5f79e2b8caf74a1eb5d3b5f
- SHA1 4a2e0f625414008f58a075da108fb3b222832fbb
- SHA512 e0fc815c44b79ac62bb6efeae2b17e1f02f9f847d3361391847186b79dd7e672e667d977ba5f4721721e67bdfea9b1025820640024bfbe5b5e36a2d74a980777
- SSDEEP 196608:dvtAZj41WJ6pzqZjwT6p9FQxcwqsJQW+zG:tKZ9JozqZjWKSxcwqoQnzG
- TLSH T148863302A783887DF85809B96C929C88AD66778635D538523FFCCF0E09BEBC735355A1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.