General
-
Target
061b1bb8e381639bb2d8c4dae9f2f0ae
-
Size
184KB
-
Sample
220211-f5e2xachem
-
MD5
061b1bb8e381639bb2d8c4dae9f2f0ae
-
SHA1
18d73ea6ceeab727f0f1aacc76e2b76f0cc724aa
-
SHA256
e9130b26cd5d24909f16818fd14ffee5c9d593ad6ef4fac66a87deea66c0297e
-
SHA512
2e3b7d9a6074d11d21ce6282593485afc0b965216a1ffced05841eb11df6616d09624bc9e09c2a9502bde9bf3db2fcb125c41bf86ec780a9ee6bae68733ae56b
Static task
static1
Behavioral task
behavioral1
Sample
061b1bb8e381639bb2d8c4dae9f2f0ae.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
061b1bb8e381639bb2d8c4dae9f2f0ae.exe
Resource
win10v2004-en-20220113
Malware Config
Extracted
arkei
homesteadr
http://homesteadr.link/ggate.php
Targets
-
-
Target
061b1bb8e381639bb2d8c4dae9f2f0ae
-
Size
184KB
-
MD5
061b1bb8e381639bb2d8c4dae9f2f0ae
-
SHA1
18d73ea6ceeab727f0f1aacc76e2b76f0cc724aa
-
SHA256
e9130b26cd5d24909f16818fd14ffee5c9d593ad6ef4fac66a87deea66c0297e
-
SHA512
2e3b7d9a6074d11d21ce6282593485afc0b965216a1ffced05841eb11df6616d09624bc9e09c2a9502bde9bf3db2fcb125c41bf86ec780a9ee6bae68733ae56b
Score10/10-
Suspicious use of NtCreateProcessExOtherParentProcess
-