Static task
static1
Behavioral task
behavioral1
Sample
5772c6231b4e6e89a3cdef186a137a99c4ffeeddc81187ac4dc3bfe06097c1a5.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
5772c6231b4e6e89a3cdef186a137a99c4ffeeddc81187ac4dc3bfe06097c1a5.exe
Resource
win10v2004-en-20220113
General
-
Target
5772c6231b4e6e89a3cdef186a137a99c4ffeeddc81187ac4dc3bfe06097c1a5
-
Size
60KB
-
MD5
546edd5e012ee667bf8b04b6c55b07de
-
SHA1
8ed812fc9ddc36cc960b8ade0ed929e967569224
-
SHA256
5772c6231b4e6e89a3cdef186a137a99c4ffeeddc81187ac4dc3bfe06097c1a5
-
SHA512
3384bb595fdcbec75be8dcf2a7e173b7e732b0d00c092ac0df5f6c18ad97ad30c83117de0496e359edff988dfad983c558af156d4f1e4e1bc276a14e4097032f
-
SSDEEP
1536:NRwaBiU+dZODSKeGHSaxjw3QUSKRH/hxU9D:NR7BiU+q+TESaiQDKRHpxU
Malware Config
Signatures
-
SlothfulMedia Main Payload 1 IoCs
Processes:
resource yara_rule sample family_slothfulmedia -
Slothfulmedia family
Files
-
5772c6231b4e6e89a3cdef186a137a99c4ffeeddc81187ac4dc3bfe06097c1a5.exe windows x86
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 712B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ