General
-
Target
PO NO. MKL1-20-06053 & TECHNICAL SPECIFICATION.exe
-
Size
807KB
-
Sample
210111-egcxc8ye5j
-
MD5
a3d8e6527b3cd4d2e74539af7918fc34
-
SHA1
cbc6e8e8e9c777b708350f4be1e14393d0c0551a
-
SHA256
d93d98295e3aebd631b2fd6d1a47ddd5ed0597343bf2c0ed870d6bdb59cb6192
-
SHA512
c6f81fc3c03c8939fdfcaea765171c2470170a91fe6a35165bc2cbf7ac18e6d5dba1876dbf2932e89f49ef593215ec2e57197464dfcc9daa893982f5c0684e9d
Static task
static1
Behavioral task
behavioral1
Sample
PO NO. MKL1-20-06053 & TECHNICAL SPECIFICATION.exe
Resource
win7v20201028
Malware Config
Extracted
remcos
212.83.46.26:4023
Targets
-
-
Target
PO NO. MKL1-20-06053 & TECHNICAL SPECIFICATION.exe
-
Size
807KB
-
MD5
a3d8e6527b3cd4d2e74539af7918fc34
-
SHA1
cbc6e8e8e9c777b708350f4be1e14393d0c0551a
-
SHA256
d93d98295e3aebd631b2fd6d1a47ddd5ed0597343bf2c0ed870d6bdb59cb6192
-
SHA512
c6f81fc3c03c8939fdfcaea765171c2470170a91fe6a35165bc2cbf7ac18e6d5dba1876dbf2932e89f49ef593215ec2e57197464dfcc9daa893982f5c0684e9d
-
Suspicious use of SetThreadContext
-