General
- Target SecuriteInfo.com.Trojan.DownLoader34.18436.32216.2975
- Size 2KB
- Sample200808-hb4qde3g86
- SHA256 83acd77bd1b76095992046c1cd53fd0fb4f0ae9f22f410facf174f4e1ce2f475
- MD5 2aaa043f1abc3118d8c292920efcbf77
- SHA1 cb0b4a024c9d791f9dcb84f5c23a24e1f94b793e
- SHA512 079f7feeba43fa935a05ec81c931c600d900199fe83d77b6aa7f7a13ac75d33aa5b8e24a4817a8ee735e3570f126676225b30d1150197d503f73d5b68d62f447
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Trojan.DownLoader34.18436.32216.2975.exe
Resource
win7v200722
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Trojan.DownLoader34.18436.32216.2975.exe
Resource
win10v200722
0 signatures
0 seconds
Malware Config
Extracted
Language
-
ps1
Source
URLs
-
exe.dropper
https://cnc.cyberwex.com/agent.exe
Targets
-
- Target SecuriteInfo.com.Trojan.DownLoader34.18436.32216.2975
- Size 2KB
- SHA256 83acd77bd1b76095992046c1cd53fd0fb4f0ae9f22f410facf174f4e1ce2f475
- MD5 2aaa043f1abc3118d8c292920efcbf77
- SHA1 cb0b4a024c9d791f9dcb84f5c23a24e1f94b793e
- SHA512 079f7feeba43fa935a05ec81c931c600d900199fe83d77b6aa7f7a13ac75d33aa5b8e24a4817a8ee735e3570f126676225b30d1150197d503f73d5b68d62f447
- MD5 SHA1 SHA512
Score10/10-
Blacklisted process makes network request
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
JavaScript code in executable