General
- Target betalingafvist.exe
- Size 265KB
- Sample210526-e27jdqh37e
- SHA256 caef1c1bf021d8a6adbf6032e999aa68e1052014bdc8691dfbf182eeadc338f1
- MD5 7aaa1f9e29bb36a06876c358699c9b9b
- SHA1 3aca978ae25d6d48bd6e3cb8b840ac31e4e413a9
- SHA512 8757c4875c929a2f1c9192dda5995bf65410c52197b5e1db4d7d83e28c345a7c85e045a95d209167f83fe3e9e55b150271030e14bbdf4975ab65faccc9db42e4
- MD5 SHA1 SHA512
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
betalingafvist.exe
Resource
win7v20210408
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
betalingafvist.exe
Resource
win10v20210410
0 signatures
0 seconds
Malware Config
Targets
-
- Target betalingafvist.exe
- Size 265KB
- SHA256 caef1c1bf021d8a6adbf6032e999aa68e1052014bdc8691dfbf182eeadc338f1
- MD5 7aaa1f9e29bb36a06876c358699c9b9b
- SHA1 3aca978ae25d6d48bd6e3cb8b840ac31e4e413a9
- SHA512 8757c4875c929a2f1c9192dda5995bf65410c52197b5e1db4d7d83e28c345a7c85e045a95d209167f83fe3e9e55b150271030e14bbdf4975ab65faccc9db42e4
- MD5 SHA1 SHA512
Score7/10-
Loads dropped DLL
-
Adds Run key to start application
-
Suspicious use of SetThreadContext