General
-
Target
INGREGENERPORFRAUFSCAL2357840003 INGREGENERPORFRAUFSCAL2357840006.exe
-
Size
801KB
-
Sample
210422-pbvbpnl2k6
-
MD5
cdbe179ccd3e2676a8149430dd4d2027
-
SHA1
dd79a36de18f788899276805f2efcaf2a6295b7a
-
SHA256
7a1ca0872400fc383eea460f0eb93927610a9ba28cd74dfa8f37d11a2b2b6d71
-
SHA512
703e87d7b5986a3c9a486a3fc5ced5ce49f89ba1469145562f86c037e733f84f9d324d362b5f3936f770c71d090a962613cc9e015e811ab14a0d75f521adf1f6
Static task
static1
Behavioral task
behavioral1
Sample
INGREGENERPORFRAUFSCAL2357840003 INGREGENERPORFRAUFSCAL2357840006.exe
Resource
win7v20210408
Malware Config
Extracted
remcos
electricaribe.duckdns.org:1717
Targets
-
-
Target
INGREGENERPORFRAUFSCAL2357840003 INGREGENERPORFRAUFSCAL2357840006.exe
-
Size
801KB
-
MD5
cdbe179ccd3e2676a8149430dd4d2027
-
SHA1
dd79a36de18f788899276805f2efcaf2a6295b7a
-
SHA256
7a1ca0872400fc383eea460f0eb93927610a9ba28cd74dfa8f37d11a2b2b6d71
-
SHA512
703e87d7b5986a3c9a486a3fc5ced5ce49f89ba1469145562f86c037e733f84f9d324d362b5f3936f770c71d090a962613cc9e015e811ab14a0d75f521adf1f6
-
Suspicious use of SetThreadContext
-