General
-
Target
b8d1bac077990b3996eec50536cffceb32c25943fb0402ef358fc0eeb3083b5e
-
Size
2.2MB
-
Sample
220121-28xxsacghq
-
MD5
d97470fad1b553c3f0266a8a84e6fdc2
-
SHA1
d0612e51c71e54a9c03e8403877840997a604672
-
SHA256
b8d1bac077990b3996eec50536cffceb32c25943fb0402ef358fc0eeb3083b5e
-
SHA512
4da2d313010e502abb98058b23e7bfdd561c855c482065d75eadbdd49e16ea8792d4b7aa083a47e2ad5202bdb5b0a8b3ed95632cd3b8a3c60b3787bbbcaf05ad
Static task
static1
Behavioral task
behavioral1
Sample
b8d1bac077990b3996eec50536cffceb32c25943fb0402ef358fc0eeb3083b5e.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
b8d1bac077990b3996eec50536cffceb32c25943fb0402ef358fc0eeb3083b5e.exe
Resource
win10-en-20211208
Malware Config
Extracted
bitrat
1.35
publiquilla.linkpc.net:9090
-
communication_password
bfdba24ee3d61f0260c4dc1034c3ee43
-
install_dir
windowssecurirysercivehealth
-
install_file
windowssecurirysercive.exe
-
tor_process
tor
Targets
-
-
Target
b8d1bac077990b3996eec50536cffceb32c25943fb0402ef358fc0eeb3083b5e
-
Size
2.2MB
-
MD5
d97470fad1b553c3f0266a8a84e6fdc2
-
SHA1
d0612e51c71e54a9c03e8403877840997a604672
-
SHA256
b8d1bac077990b3996eec50536cffceb32c25943fb0402ef358fc0eeb3083b5e
-
SHA512
4da2d313010e502abb98058b23e7bfdd561c855c482065d75eadbdd49e16ea8792d4b7aa083a47e2ad5202bdb5b0a8b3ed95632cd3b8a3c60b3787bbbcaf05ad
Score10/10-
Adds Run key to start application
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext
-