General
- Target 2020JULYSTATEMENTOFACCOUNT.exe
- Size 1.4MB
- Sample200810-gc6hsq22bx
- SHA256 ff0c4ed6bc9febde458e9115e3c558ae2740edf2252154fc1713c6621f0d7eae
- MD5 9868f8293536408a2a1e6c4978d0235a
- SHA1 9087203883648ecd8b6f6cf9c7533e4102612913
- SHA512 c3e0595595b4c8fd05c88ade2c3dea6c51c66c9bba0db5484f27c4793ff47b9b4bdd55f1a57fa5aaa5a5d5051f2ebdfd15365cc3388e5790800d507f06e1d319
- MD5 SHA1 SHA512
Score
9/10
Static task
static1
Behavioral task
behavioral1
Sample
2020JULYSTATEMENTOFACCOUNT.exe
Resource
win7v200722
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
2020JULYSTATEMENTOFACCOUNT.exe
Resource
win10
0 signatures
0 seconds
Malware Config
Targets
-
- Target 2020JULYSTATEMENTOFACCOUNT.exe
- Size 1.4MB
- SHA256 ff0c4ed6bc9febde458e9115e3c558ae2740edf2252154fc1713c6621f0d7eae
- MD5 9868f8293536408a2a1e6c4978d0235a
- SHA1 9087203883648ecd8b6f6cf9c7533e4102612913
- SHA512 c3e0595595b4c8fd05c88ade2c3dea6c51c66c9bba0db5484f27c4793ff47b9b4bdd55f1a57fa5aaa5a5d5051f2ebdfd15365cc3388e5790800d507f06e1d319
- MD5 SHA1 SHA512
Score9/10-
ServiceHost packer
Detects ServiceHost packer used for .NET malware
-
Executes dropped EXE
-
Drops startup file
-
Loads dropped DLL
-
Adds Run key to start application