General
- Target MY_CARD.EXE
- Size 450KB
- Sample200804-zy2ylj9kmn
- SHA256 7fefe993a5094956c0dbdfb98e7a90aa3cc4a1dce3a4becc9fffc28e3ed4b00a
- MD5 9b08af226829db1fe0ef8f5810d6e2ac
- SHA1 b3e247d758a8d175890e1b215242677a9031e37b
- SHA512 a28d8d95f96855c4c4ca46ef09de66517cf5723e11aafc4f0dfb62cd2b20d4fea23937e0f013cb023087fac36d2f1356b2ecda639c17bd6a3433b63062eb8ade
- MD5 SHA1 SHA512
Score
9/10
Static task
static1
Behavioral task
behavioral1
Sample
MY_CARD.EXE
Resource
win7
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
MY_CARD.EXE
Resource
win10
0 signatures
0 seconds
Malware Config
Targets
-
- Target MY_CARD.EXE
- Size 450KB
- SHA256 7fefe993a5094956c0dbdfb98e7a90aa3cc4a1dce3a4becc9fffc28e3ed4b00a
- MD5 9b08af226829db1fe0ef8f5810d6e2ac
- SHA1 b3e247d758a8d175890e1b215242677a9031e37b
- SHA512 a28d8d95f96855c4c4ca46ef09de66517cf5723e11aafc4f0dfb62cd2b20d4fea23937e0f013cb023087fac36d2f1356b2ecda639c17bd6a3433b63062eb8ade
- MD5 SHA1 SHA512
Score9/10-
ServiceHost packer
Detects ServiceHost packer used for .NET malware
-
Executes dropped EXE
-
Drops startup file
-
Loads dropped DLL
-
Adds Run key to start application