General
-
Target
59b2a934d991b2834701e51cd916bb50
-
Size
9.2MB
-
Sample
201117-9b4yb91acx
-
MD5
d6a932f29fa67ee28e652a7eca80960e
-
SHA1
7c2783f3f5c40d14dc02be73609d72e3a7619317
-
SHA256
01132ac533945c32ade12b67ae87347fec46fff734d5affd3f4f62a9b0c60a60
-
SHA512
83935cc0120bf97d0c5b51c2ee176f58c2e0ff987fb6f22aa6a4b0de1af285ec354dda9efac31ae933a3b36177271ca274743e374076ca86135dbbbba8d9011a
Static task
static1
Behavioral task
behavioral1
Sample
59b2a934d991b2834701e51cd916bb50.exe
Resource
win7v20201028
Behavioral task
behavioral2
Sample
59b2a934d991b2834701e51cd916bb50.exe
Resource
win10v20201028
Malware Config
Targets
-
-
Target
59b2a934d991b2834701e51cd916bb50
-
Size
9.2MB
-
MD5
d6a932f29fa67ee28e652a7eca80960e
-
SHA1
7c2783f3f5c40d14dc02be73609d72e3a7619317
-
SHA256
01132ac533945c32ade12b67ae87347fec46fff734d5affd3f4f62a9b0c60a60
-
SHA512
83935cc0120bf97d0c5b51c2ee176f58c2e0ff987fb6f22aa6a4b0de1af285ec354dda9efac31ae933a3b36177271ca274743e374076ca86135dbbbba8d9011a
Score9/10-
ServiceHost packer
Detects ServiceHost packer used for .NET malware
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-