General
- Target TT.exe
- Size 1.1MB
- Sample201215-1p1bndq6mx
- SHA256 1115de4c39b2799e9dbac90d4bcad5d1ddbf0ebd310fe04029fc379cd8bc034f
- MD5 81a1e84785300e0e1d1356929bd921ce
- SHA1 cd7124b8209cf6812e4157fcc5f20ff125821f15
- SHA512 c3acdb5daebfcf19003e54896b03dd5b00f53a659fc842afa5680ca18462fcefb36e33c582271a0395c50fc32c570b5b229380549f74f810257ff5be3be89cde
- MD5 SHA1 SHA512
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
TT.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
TT.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Targets
-
- Target TT.exe
- Size 1.1MB
- SHA256 1115de4c39b2799e9dbac90d4bcad5d1ddbf0ebd310fe04029fc379cd8bc034f
- MD5 81a1e84785300e0e1d1356929bd921ce
- SHA1 cd7124b8209cf6812e4157fcc5f20ff125821f15
- SHA512 c3acdb5daebfcf19003e54896b03dd5b00f53a659fc842afa5680ca18462fcefb36e33c582271a0395c50fc32c570b5b229380549f74f810257ff5be3be89cde
- MD5 SHA1 SHA512
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Suspicious use of SetThreadContext