General
-
Target
6eccbd78ffa89d1087dd16a714e0a512
-
Size
12.4MB
-
Sample
201214-td4yww38d2
-
MD5
6eccbd78ffa89d1087dd16a714e0a512
-
SHA1
4c7c4d10f9089e3ada8cc8e25b9fbbc85f39dad0
-
SHA256
8f3bc132f79d46b744f512f8cf3b831aa37268daed73dc03d9e52c1b6c6022ac
-
SHA512
a35b95bd41ac021eea2b59de6ebbab96cb168df9c0bbdeb4e95e97dbfb6bb7c07a9f9b18a95f2e1e22086344ada44303b347bb1d4272d07fbc209494c03cd24e
Static task
static1
Behavioral task
behavioral1
Sample
6eccbd78ffa89d1087dd16a714e0a512.exe
Resource
win7v20201028
Behavioral task
behavioral2
Sample
6eccbd78ffa89d1087dd16a714e0a512.exe
Resource
win10v20201028
Malware Config
Targets
-
-
Target
6eccbd78ffa89d1087dd16a714e0a512
-
Size
12.4MB
-
MD5
6eccbd78ffa89d1087dd16a714e0a512
-
SHA1
4c7c4d10f9089e3ada8cc8e25b9fbbc85f39dad0
-
SHA256
8f3bc132f79d46b744f512f8cf3b831aa37268daed73dc03d9e52c1b6c6022ac
-
SHA512
a35b95bd41ac021eea2b59de6ebbab96cb168df9c0bbdeb4e95e97dbfb6bb7c07a9f9b18a95f2e1e22086344ada44303b347bb1d4272d07fbc209494c03cd24e
Score10/10-
Creates new service(s)
-
Executes dropped EXE
-
Modifies Windows Firewall
-
Sets service image path in registry
-
Deletes itself
-
Suspicious use of SetThreadContext
-