General
-
Target
Proof of Payment.exe
-
Size
669KB
-
Sample
210112-fan4vmkhm6
-
MD5
4ec018f96f78c1bb6425f5e1bb71f6da
-
SHA1
5190f3d25beaebda68285ed0dae5241fcd1b2162
-
SHA256
ee564dc0c72681dd264376c496603592961ed0025f607f5b5b0a9f025fa521bc
-
SHA512
d7565e7928794486a4f4e30726030bab108e2d3b99ddc30171802f1f8dc820957850fcd610ae5e8468d24374d2efd9b5bf8040fd8ab6e9cd9bd049cd6cf2b5c9
Static task
static1
Behavioral task
behavioral1
Sample
Proof of Payment.exe
Resource
win7v20201028
Malware Config
Targets
-
-
Target
Proof of Payment.exe
-
Size
669KB
-
MD5
4ec018f96f78c1bb6425f5e1bb71f6da
-
SHA1
5190f3d25beaebda68285ed0dae5241fcd1b2162
-
SHA256
ee564dc0c72681dd264376c496603592961ed0025f607f5b5b0a9f025fa521bc
-
SHA512
d7565e7928794486a4f4e30726030bab108e2d3b99ddc30171802f1f8dc820957850fcd610ae5e8468d24374d2efd9b5bf8040fd8ab6e9cd9bd049cd6cf2b5c9
-
NetWire RAT payload
-
Suspicious use of SetThreadContext
-