Resubmissions

06-07-2022 08:34

220706-kgpzescfa6 10

10-02-2022 17:15

220210-vst3maaehl 10

10-02-2022 17:13

220210-vrm8paaehk 10

07-02-2022 17:48

220207-wdjh1sfbd2 4

30-01-2022 12:23

220130-pkf8xabfc3 3

General

  • Target

    smphost.dll

  • Size

    144KB

  • Sample

    220210-vst3maaehl

  • MD5

    fc484855692f2a7d1eae090086a1eb72

  • SHA1

    2e9103747750b40835f58d9e57c2ab75eeaf25f6

  • SHA256

    e58b9bbb7bcdf3e901453b7b9c9e514fed1e53565e3280353dccc77cde26a98e

  • SHA512

    2f6b6e8aa82dc4aa61a540bae1d98682ec79e73ccfeaf9c273b053c2162f35207842f7ab2f1bc06e927d706ec88ecf209d2c57e86323c38fb43e9d694e624311

Score
10/10

Malware Config

Targets

    • Target

      smphost.dll

    • Size

      144KB

    • MD5

      fc484855692f2a7d1eae090086a1eb72

    • SHA1

      2e9103747750b40835f58d9e57c2ab75eeaf25f6

    • SHA256

      e58b9bbb7bcdf3e901453b7b9c9e514fed1e53565e3280353dccc77cde26a98e

    • SHA512

      2f6b6e8aa82dc4aa61a540bae1d98682ec79e73ccfeaf9c273b053c2162f35207842f7ab2f1bc06e927d706ec88ecf209d2c57e86323c38fb43e9d694e624311

    Score
    10/10
    • Suspicious use of NtCreateProcessExOtherParentProcess

MITRE ATT&CK Enterprise v6

Tasks