General
- Target sphinx_1.0.0.0.vir
- Size 1.6MB
- Sample200719-khthxm64q2
- SHA256 18f150bc5cab780a4eaf35e198bb343497528b4095613ab48a8585c5caa937b5
- MD5 9f6d20d788c7cc43f05c30249cb743fa
- SHA1 f94698dd370ff396d2203b0ce4f6c91c234d11ff
- SHA512 769a8fb1ceb96f52b73667093910f84d738155dbfe60abd90184cad8b3cd6b449f7040f7b3bf3fd825e5ddfacfb93590bb1fb98c03fb687da0d91283fb08df68
- MD5 SHA1 SHA512
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
sphinx_1.0.0.0.vir.exe
Resource
win7
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
sphinx_1.0.0.0.vir.exe
Resource
win10v200430
0 signatures
0 seconds
Malware Config
Targets
-
- Target sphinx_1.0.0.0.vir
- Size 1.6MB
- SHA256 18f150bc5cab780a4eaf35e198bb343497528b4095613ab48a8585c5caa937b5
- MD5 9f6d20d788c7cc43f05c30249cb743fa
- SHA1 f94698dd370ff396d2203b0ce4f6c91c234d11ff
- SHA512 769a8fb1ceb96f52b73667093910f84d738155dbfe60abd90184cad8b3cd6b449f7040f7b3bf3fd825e5ddfacfb93590bb1fb98c03fb687da0d91283fb08df68
- MD5 SHA1 SHA512
Score8/10-
Executes dropped EXE
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-
Suspicious use of SetThreadContext