General
- Target SOA.exe
- Size 883KB
- Sample201022-wzdndebn4e
- SHA256 5388c70ef1d9bfc414a92c3aa4ea34db6992ee705813b5b4a2b4c28b435cbf6c
- MD5 c785c3142fbe0e47c18403e00a94af7a
- SHA1 6950c20de7241b7b16646c28ab94715f54bd4ffb
- SHA512 da6e8f42d1544db8aea3b127676037013865c92a30b4e07b0a6ff51a9bbf67d72ba9c145cea808d4bca60b95fbf79abc35323086c0f50b0e810cf606d6e66158
- MD5 SHA1 SHA512
Score
9/10
Static task
static1
Behavioral task
behavioral1
Sample
SOA.exe
Resource
win7v200722
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
SOA.exe
Resource
win10v200722
0 signatures
0 seconds
Malware Config
Targets
-
- Target SOA.exe
- Size 883KB
- SHA256 5388c70ef1d9bfc414a92c3aa4ea34db6992ee705813b5b4a2b4c28b435cbf6c
- MD5 c785c3142fbe0e47c18403e00a94af7a
- SHA1 6950c20de7241b7b16646c28ab94715f54bd4ffb
- SHA512 da6e8f42d1544db8aea3b127676037013865c92a30b4e07b0a6ff51a9bbf67d72ba9c145cea808d4bca60b95fbf79abc35323086c0f50b0e810cf606d6e66158
- MD5 SHA1 SHA512
Score9/10-
ServiceHost packer
Detects ServiceHost packer used for .NET malware
-
Suspicious use of SetThreadContext