General
- Target Protecteded.exe
- Size 2.0MB
- Sample210629-wdk7ccktya
- SHA256 90cf380fe740fe0238b6657feee9905d2f03a6945bcde6db01f24948a3a41a7a
- MD5 db77d643f56c5e832b3b67492debaedd
- SHA1 62ce9b30b4a99ca830bb4c3ed497f715e181d7b2
- SHA512 0a9b6cdde0532ea9ae855c1b79885b2dd5de943d65df3150e27dce155649fee8261e8c568037d6d69d9974bc67befc628af842eb5b1f6c076eb095553109e5b5
- MD5 SHA1 SHA512
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
Protecteded.exe
Resource
win7v20210410
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
Protecteded.exe
Resource
win10v20210408
0 signatures
0 seconds
Malware Config
Targets
-
- Target Protecteded.exe
- Size 2.0MB
- SHA256 90cf380fe740fe0238b6657feee9905d2f03a6945bcde6db01f24948a3a41a7a
- MD5 db77d643f56c5e832b3b67492debaedd
- SHA1 62ce9b30b4a99ca830bb4c3ed497f715e181d7b2
- SHA512 0a9b6cdde0532ea9ae855c1b79885b2dd5de943d65df3150e27dce155649fee8261e8c568037d6d69d9974bc67befc628af842eb5b1f6c076eb095553109e5b5
- MD5 SHA1 SHA512
Score8/10-
Deletes itself
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext