General
- Target Payment.exe
- Size 650KB
- Sample201217-yzlbachfys
- SHA256 701607597adc3999cb756b5e5205febaf4698ce20a3604e6ad79e49dfd060671
- MD5 c576f125bb9e20097298d58c1f9fa96e
- SHA1 15d2a4031e5b267cffa905f67b441cb2cc667c23
- SHA512 eeffd18295d776a6b760f41b0ea35f75e485adf0d9f6414c5137139fe83981ddbfe79ae9607ff3a75adedb0a3e53dbbbeb437e35b92fa9c3d64a8880a902052c
- MD5 SHA1 SHA512
Score
9/10
Static task
static1
Behavioral task
behavioral1
Sample
Payment.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
Payment.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Targets
-
- Target Payment.exe
- Size 650KB
- SHA256 701607597adc3999cb756b5e5205febaf4698ce20a3604e6ad79e49dfd060671
- MD5 c576f125bb9e20097298d58c1f9fa96e
- SHA1 15d2a4031e5b267cffa905f67b441cb2cc667c23
- SHA512 eeffd18295d776a6b760f41b0ea35f75e485adf0d9f6414c5137139fe83981ddbfe79ae9607ff3a75adedb0a3e53dbbbeb437e35b92fa9c3d64a8880a902052c
- MD5 SHA1 SHA512
Score9/10-
ServiceHost packer
Detects ServiceHost packer used for .NET malware
-
Suspicious use of SetThreadContext