General
-
Target
bc451f966a4fc42c7ec37a53ca7faf84be5f75e71ef68a0c11fcbad874aa8631
-
Size
2.5MB
-
Sample
220121-28a31scec6
-
MD5
7a16c96ee575e39bb8bc49ba2c54f1b9
-
SHA1
cce2f5c153235068de706ef5a524e7c28eda3827
-
SHA256
bc451f966a4fc42c7ec37a53ca7faf84be5f75e71ef68a0c11fcbad874aa8631
-
SHA512
38a04290f830d5bb5dd9e328c7123c519b5ab1d52f318cfa7e4119758708d0ac1a2065255b2bc92fe0edd5c27b9c91ad9607d0f82a1f8ee3c758cd9ca02776d7
Static task
static1
Behavioral task
behavioral1
Sample
bc451f966a4fc42c7ec37a53ca7faf84be5f75e71ef68a0c11fcbad874aa8631.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
bc451f966a4fc42c7ec37a53ca7faf84be5f75e71ef68a0c11fcbad874aa8631.exe
Resource
win10-en-20211208
Malware Config
Extracted
bitrat
1.38
jairoandresotalvarorend.linkpc.net:9082
-
communication_password
bfdba24ee3d61f0260c4dc1034c3ee43
-
install_dir
sophosavsdefender
-
install_file
sophosavsdefender.exe
-
tor_process
tor
Targets
-
-
Target
bc451f966a4fc42c7ec37a53ca7faf84be5f75e71ef68a0c11fcbad874aa8631
-
Size
2.5MB
-
MD5
7a16c96ee575e39bb8bc49ba2c54f1b9
-
SHA1
cce2f5c153235068de706ef5a524e7c28eda3827
-
SHA256
bc451f966a4fc42c7ec37a53ca7faf84be5f75e71ef68a0c11fcbad874aa8631
-
SHA512
38a04290f830d5bb5dd9e328c7123c519b5ab1d52f318cfa7e4119758708d0ac1a2065255b2bc92fe0edd5c27b9c91ad9607d0f82a1f8ee3c758cd9ca02776d7
Score10/10-
Adds Run key to start application
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext
-