Analysis
-
max time kernel
141s -
max time network
150s -
platform
windows7_x64 -
resource
win7-en-20211208 -
submitted
26-01-2022 14:54
Static task
static1
Behavioral task
behavioral1
Sample
a80e1974d660acaa406fa9e7d9fa2031a3e08882e76a94da44a13ff6f4ea8ad1.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
a80e1974d660acaa406fa9e7d9fa2031a3e08882e76a94da44a13ff6f4ea8ad1.exe
Resource
win10-en-20211208
General
-
Target
a80e1974d660acaa406fa9e7d9fa2031a3e08882e76a94da44a13ff6f4ea8ad1.exe
-
Size
16KB
-
MD5
89695ad950eca01e2b670f5e28c41950
-
SHA1
d3e1c60ba3253173eba04d4c1bac2c46b9840e68
-
SHA256
a80e1974d660acaa406fa9e7d9fa2031a3e08882e76a94da44a13ff6f4ea8ad1
-
SHA512
6cc4f6c9550fd9caad98c7c91595c2c93a4b7e20ae16f9f0c5b20923957a7fcdb805c601d984786ff9d94e8c53a003ae024b7386fcf497e0d835072e53334ae2
Malware Config
Extracted
nworm
v0.3.8
20.188.45.59:4782
3d95be1e
Signatures
-
NWorm
A TrickBot module used to propagate to vulnerable domain controllers.