General
-
Target
Presupuesto proyecto P3787-SHN Barcelona.pdf.exe
-
Size
389KB
-
Sample
220214-m3efxshbb8
-
MD5
889ae401a3acc4f824065ac0f47143b5
-
SHA1
6f81823927158edf53d6b08d2d38dab356cba70e
-
SHA256
69186bb77f81edb9bcc66a0382fe00944e6dc67982d61d37d7f0d2e32e92d727
-
SHA512
128988c0047380512caa0d6d9c68f7571f06388d6862549675caeb21ddbe04e0b648e78f0ea0e90d7c516b33c91d2abe851503dc55cb842b24da7196ab7b1915
Static task
static1
Behavioral task
behavioral1
Sample
Presupuesto proyecto P3787-SHN Barcelona.pdf.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
Presupuesto proyecto P3787-SHN Barcelona.pdf.exe
Resource
win10v2004-en-20220113
Malware Config
Targets
-
-
Target
Presupuesto proyecto P3787-SHN Barcelona.pdf.exe
-
Size
389KB
-
MD5
889ae401a3acc4f824065ac0f47143b5
-
SHA1
6f81823927158edf53d6b08d2d38dab356cba70e
-
SHA256
69186bb77f81edb9bcc66a0382fe00944e6dc67982d61d37d7f0d2e32e92d727
-
SHA512
128988c0047380512caa0d6d9c68f7571f06388d6862549675caeb21ddbe04e0b648e78f0ea0e90d7c516b33c91d2abe851503dc55cb842b24da7196ab7b1915
Score10/10-
Suspicious use of NtCreateProcessExOtherParentProcess
-
Adds policy Run key to start application
-
Executes dropped EXE
-
Loads dropped DLL
-
Accesses Microsoft Outlook accounts
-
Adds Run key to start application
-
Program crash
-
Suspicious use of SetThreadContext
-