General
- Target IMG_212022100120011.exe
- Size 69KB
- Sample220122-jm5fmaachj
- SHA256 5b476b935cae4bf02299f7dee135b0bb091fd7716b2973d7172e04f4f2985d72
- MD5 cecfdefc8f201d03066386a9a6b011f0
- SHA1 fd451496139859f387cfef71404d50d042297ca0
- SHA512 aed76f8f33573fc1b62fd9e194e797fbccb7209e526ef6dc980882c6b889db6b6742e88d8fad0e0e29bc4620b7ae857be02cab380439cb231748c1fbc3d2fd8b
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
IMG_212022100120011.exe
Resource
win7-en-20211208
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
IMG_212022100120011.exe
Resource
win10-en-20211208
0 signatures
0 seconds
Malware Config
Targets
-
- Target IMG_212022100120011.exe
- Size 69KB
- SHA256 5b476b935cae4bf02299f7dee135b0bb091fd7716b2973d7172e04f4f2985d72
- MD5 cecfdefc8f201d03066386a9a6b011f0
- SHA1 fd451496139859f387cfef71404d50d042297ca0
- SHA512 aed76f8f33573fc1b62fd9e194e797fbccb7209e526ef6dc980882c6b889db6b6742e88d8fad0e0e29bc4620b7ae857be02cab380439cb231748c1fbc3d2fd8b
- MD5 SHA1 SHA512
Score10/10-
Async RAT payload
-
Adds Run key to start application
-
Suspicious use of SetThreadContext