Static task
static1
Behavioral task
behavioral1
Sample
m)hhm.exe
Resource
win7v20201028
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
m)hhm.exe
Resource
win10v20201028
windows10_x64
0 signatures
0 seconds
General
-
Target
m)hhm.exe
-
Size
3.5MB
-
MD5
6bc5f53d4082f12dd83aca45bae81e64
-
SHA1
1fb4cd155393db202b0ceed59ff49a10329b2592
-
SHA256
f868e88eb2524d15cfcd87afdf697074e0f9785792f342044501347dce549a1f
-
SHA512
05b430fe0a57373098e648fa19e3ef47b5e64ecb6fca414e8b7b66c23d7c6da626f6ac3c15115edde4421344b0ead7a6ea015791f42d853fe14af631cbca831e
Score
10/10
Malware Config
Extracted
Family
zebrocy
C2
http://89.37.226.148/technet-support/library/online-service-description.php?id_name=
Signatures
-
Zebrocy family
-
JavaScript code in executable 1 IoCs
Processes:
resource yara_rule sample js
Files
-
m)hhm.exe.exe windows x86