General
- Target InstallTool.exe
- Size 4.2MB
- Sample220210-rmwsgshbbn
- SHA256 f1a11f00ce1ff509fa6039cc1ecc147f6f4e83d15d9c27f6a2a97da78c0512ba
- MD5 e86005858c41fa0bb1d3605528794e2e
- SHA1 cd5eb8ab52914024abba7df691676d55fb5facf1
- SHA512 1aba8097eeecfa7b66f8cc0e7c999c29be046a30c5d5400c7667003cdb9321521914c1bf0e3a09f8e6ce74bf6ccf5d279bfe39d84687472301f47709ffd55362
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
InstallTool.exe
Resource
win7-en-20211208
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
InstallTool.exe
Resource
win10v2004-en-20220112
0 signatures
0 seconds
Malware Config
Targets
-
- Target InstallTool.exe
- Size 4.2MB
- SHA256 f1a11f00ce1ff509fa6039cc1ecc147f6f4e83d15d9c27f6a2a97da78c0512ba
- MD5 e86005858c41fa0bb1d3605528794e2e
- SHA1 cd5eb8ab52914024abba7df691676d55fb5facf1
- SHA512 1aba8097eeecfa7b66f8cc0e7c999c29be046a30c5d5400c7667003cdb9321521914c1bf0e3a09f8e6ce74bf6ccf5d279bfe39d84687472301f47709ffd55362
- MD5 SHA1 SHA512
Score10/10-
Suspicious use of NtCreateProcessExOtherParentProcess