General
- Target INV#0595.exe
- Size 627KB
- Sample200814-lk22vr2k22
- SHA256 bfea5a7839b0a45d3e0074b6e3882ada8f6aa913cf7e0d08ba290a49af855596
- MD5 e0a4e6378c211f8584be6aea083c9743
- SHA1 254d4e34dd8521ea883e7140b7adc9a9ef09145c
- SHA512 e8254c7efcf446545f210eb0cf5a61810ca60bc72b798b9dd5aeb502213614feea129b5b59e46dae67a8f2e31ea6392f8de565321ddc9720487825332f5f3c05
- MD5 SHA1 SHA512
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
INV#0595.exe
Resource
win7
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
INV#0595.exe
Resource
win10
0 signatures
0 seconds
Malware Config
Targets
-
- Target INV#0595.exe
- Size 627KB
- SHA256 bfea5a7839b0a45d3e0074b6e3882ada8f6aa913cf7e0d08ba290a49af855596
- MD5 e0a4e6378c211f8584be6aea083c9743
- SHA1 254d4e34dd8521ea883e7140b7adc9a9ef09145c
- SHA512 e8254c7efcf446545f210eb0cf5a61810ca60bc72b798b9dd5aeb502213614feea129b5b59e46dae67a8f2e31ea6392f8de565321ddc9720487825332f5f3c05
- MD5 SHA1 SHA512
Score6/10-
Adds Run key to start application
-
Legitimate hosting services abused for malware hosting/C2
-
Suspicious use of SetThreadContext