General
- Target ORDER.exe
- Size 663KB
- Sample201127-kpzzx2425s
- SHA256 e75f2e899377c5313dd3cee3ed9d8ac7e84267656656c5b9eaaee23ec50b5ab8
- MD5 47af288ac4776f74b6460c0af541c859
- SHA1 fbe1cb1497f614494ea8ba10f4f26110203f06ae
- SHA512 478edfbda6e7416388c345e6b4ddc8903c3074a4b8296140c518277962ae18e8de9c598936893e7976e7c3c715515edc5b6a41b9e0cb0661151fb37deea2f9b7
- MD5 SHA1 SHA512
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
ORDER.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
ORDER.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Targets
-
- Target ORDER.exe
- Size 663KB
- SHA256 e75f2e899377c5313dd3cee3ed9d8ac7e84267656656c5b9eaaee23ec50b5ab8
- MD5 47af288ac4776f74b6460c0af541c859
- SHA1 fbe1cb1497f614494ea8ba10f4f26110203f06ae
- SHA512 478edfbda6e7416388c345e6b4ddc8903c3074a4b8296140c518277962ae18e8de9c598936893e7976e7c3c715515edc5b6a41b9e0cb0661151fb37deea2f9b7
- MD5 SHA1 SHA512
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Suspicious use of SetThreadContext