General
- Target Payment Details.scr
- Size 88KB
- Sample201109-2lm613e23e
- SHA256 35de9956cb66110ef820db84e9eb9af8ea161f63a7ccfceb482c21299db67e9d
- MD5 6b50011083a80534c0ca3b0a786d249f
- SHA1 3e5040b79e1560138077a8b923b95b7c9bb16b8e
- SHA512 43328243f2cf0f6620029451842f61e4811e749466dc6069e2c3d8c001d11b7d9c4f8e6adea21c78ef97609def151e562ab59d93535f603dc262dc709bacf824
- MD5 SHA1 SHA512
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
Payment Details.scr
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
Payment Details.scr
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Targets
-
- Target Payment Details.scr
- Size 88KB
- SHA256 35de9956cb66110ef820db84e9eb9af8ea161f63a7ccfceb482c21299db67e9d
- MD5 6b50011083a80534c0ca3b0a786d249f
- SHA1 3e5040b79e1560138077a8b923b95b7c9bb16b8e
- SHA512 43328243f2cf0f6620029451842f61e4811e749466dc6069e2c3d8c001d11b7d9c4f8e6adea21c78ef97609def151e562ab59d93535f603dc262dc709bacf824
- MD5 SHA1 SHA512
Score7/10-
Checks QEMU agent state file
Checks state file used by QEMU agent, possibly to detect virtualization.
-
Suspicious use of NtSetInformationThreadHideFromDebugger