General
- Target 8b4fab08f133b68b6c49c03517cd7b49
- Size 182KB
- Sample201117-pnvlqdav7e
- SHA256 2f74ba8ea35dd8c4e0f0dbcb6ba06b1bdb2aa1f5966e94592ad1468bb092663b
Score
10/10
Malware Config
Targets
-
- Target 8b4fab08f133b68b6c49c03517cd7b49
- Size 182KB
- SHA256 2f74ba8ea35dd8c4e0f0dbcb6ba06b1bdb2aa1f5966e94592ad1468bb092663b
Score10/10-
Windows security bypass
-
Creates new service(s)
-
Executes dropped EXE
-
Modifies Windows Firewall
-
Sets service image path in registry
-
Deletes itself
-
Modifies service
-
Suspicious use of SetThreadContext