General
- Target AVG.exe
- Size 3.5MB
- Sample220205-eqsh1sgbb5
- SHA256 53d1708d666d49dcdd2834d91de3f2bfb61f7263a5e3213635d6e893d28e5bca
- MD5 6f58578e216f3d72de5be95b498cc8e0
- SHA1 942e9171183c5ea3ff435ac546fd14ae0dd65214
- SHA512 1f46393c5b98b57799889d179f9fa59b8eb1948d44af8252a744d4953dfcf89e759d51977854870f8177dd5b9dee348162f8b097b6dca3d053626a6900e36f77
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
AVG.exe
Resource
win7-en-20211208
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
AVG.exe
Resource
win10v2004-en-20220112
0 signatures
0 seconds
Malware Config
Targets
-
- Target AVG.exe
- Size 3.5MB
- SHA256 53d1708d666d49dcdd2834d91de3f2bfb61f7263a5e3213635d6e893d28e5bca
- MD5 6f58578e216f3d72de5be95b498cc8e0
- SHA1 942e9171183c5ea3ff435ac546fd14ae0dd65214
- SHA512 1f46393c5b98b57799889d179f9fa59b8eb1948d44af8252a744d4953dfcf89e759d51977854870f8177dd5b9dee348162f8b097b6dca3d053626a6900e36f77
- MD5 SHA1 SHA512
Score10/10-
Suspicious use of NtCreateProcessExOtherParentProcess
-
Sets service image path in registry