General
-
Target
5cada311c0db4a8fe87a377b82f4ba9f686953ae98b59dd493d66da8927d9e68
-
Size
2.1MB
-
Sample
220121-3tphjadee2
-
MD5
9bf79297f1cb4d4558df34df6543629c
-
SHA1
93773632d065436990bec5c67cf06bd552149dd7
-
SHA256
5cada311c0db4a8fe87a377b82f4ba9f686953ae98b59dd493d66da8927d9e68
-
SHA512
16113979fde18e5556ab2dfaa12febda59928816109d50649232ee89045260bbd0a91a0917a93e70aee1e9cc52ab54388ae3b2a1f514aba401fa475f694e57f6
Static task
static1
Behavioral task
behavioral1
Sample
5cada311c0db4a8fe87a377b82f4ba9f686953ae98b59dd493d66da8927d9e68.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
5cada311c0db4a8fe87a377b82f4ba9f686953ae98b59dd493d66da8927d9e68.exe
Resource
win10-en-20211208
Malware Config
Extracted
bitrat
1.38
jairoandresotalvarorend.linkpc.net:9086
-
communication_password
bfdba24ee3d61f0260c4dc1034c3ee43
-
install_dir
windowsdefenderinitservices
-
install_file
windowsdefenderinitservice.exe
-
tor_process
tor
Targets
-
-
Target
5cada311c0db4a8fe87a377b82f4ba9f686953ae98b59dd493d66da8927d9e68
-
Size
2.1MB
-
MD5
9bf79297f1cb4d4558df34df6543629c
-
SHA1
93773632d065436990bec5c67cf06bd552149dd7
-
SHA256
5cada311c0db4a8fe87a377b82f4ba9f686953ae98b59dd493d66da8927d9e68
-
SHA512
16113979fde18e5556ab2dfaa12febda59928816109d50649232ee89045260bbd0a91a0917a93e70aee1e9cc52ab54388ae3b2a1f514aba401fa475f694e57f6
Score10/10-
Adds Run key to start application
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext
-