161925cd5323dd58b3dee09c2f89c97c436cfa81c6b740d77d5fce7de0b55777

Sharing

Copy URL Twitter E-mail

General

Target
161925cd5323dd58b3dee09c2f89c97c436cfa81c6b740d77d5fce7de0b55777
Size 202KB
Sample220220-lyck4accfq
SHA256 161925cd5323dd58b3dee09c2f89c97c436cfa81c6b740d77d5fce7de0b55777
MD5 a0b20675907355281f517795ee1ec3dd
SHA1 f5c7ed589e5170191dbd4ea998a14d229bbff51c
SHA512 f85ae1a5332720df6992b327634311cfcf4c60cec392e0ba52f20add9018514670ed1010f08aba61c0aa1abd4009ae218c27fb1248952617a4ec6295836658a4
SSDEEP 3072:K0s37VTsTTNEBufbehSLKnWX595V6mpTmc:67VTqEsf6hiUMNmc
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

161925cd5323dd58b3dee09c2f89c97c436cfa81c6b740d77d5fce7de0b55777

.exe 202KB

161925cd5323dd58b3dee09c2f89c97c436cfa81c6b740d77d5fce7de0b55777

IMPHASH 258afda29d5eb92b4da9f5a514056dee
SHA256 161925cd5323dd58b3dee09c2f89c97c436cfa81c6b740d77d5fce7de0b55777
MD5 a0b20675907355281f517795ee1ec3dd
SHA1 f5c7ed589e5170191dbd4ea998a14d229bbff51c
SHA512 f85ae1a5332720df6992b327634311cfcf4c60cec392e0ba52f20add9018514670ed1010f08aba61c0aa1abd4009ae218c27fb1248952617a4ec6295836658a4
SSDEEP 3072:K0s37VTsTTNEBufbehSLKnWX595V6mpTmc:67VTqEsf6hiUMNmc
MD5 SHA1 SHA512 SSDEEP

windows x64

Minor OS version

Major OS version

Entry point

23864

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

iphlpapi

IcmpCloseHandle IcmpCreateFile GetAdaptersAddresses IcmpSendEcho GetIpNetTable

kernel32

SetLastError WriteProcessMemory WaitForMultipleObjects Sleep SetFilePointer CloseHandle GetTickCount GetLastError GetModuleFileNameW GetModuleHandleA GetCommandLineW GetTempPathW GetWindowsDirectoryW CreateFileW DeleteFileW CopyFileW GetVersionExW CreateToolhelp32Snapshot Process32FirstW Process32NextW GetCurrentThread CreateRemoteThread CreateThread ExitProcess GetCurrentProcess OpenProcess GetProcessHeap HeapFree HeapAlloc VirtualFreeEx VirtualAllocEx VirtualFree VirtualAlloc LocalFree GlobalFree GlobalAlloc GetProcAddress FreeLibrary LoadLibraryA SetFilePointerEx HeapReAlloc HeapSize GetConsoleMode GetConsoleCP FlushFileBuffers SetStdHandle WriteConsoleW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW RtlUnwindEx RtlPcToFileHeader RaiseException EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW TerminateProcess GetModuleHandleExW GetStdHandle WriteFile MultiByteToWideChar WideCharToMultiByte GetACP GetStringTypeW LCMapStringW GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetOEMCP GetCPInfo

advapi32

OpenProcessToken OpenThreadToken GetTokenInformation AdjustTokenPrivileges LookupAccountSidW OpenSCManagerW EnumServicesStatusW LookupPrivilegeValueW ImpersonateSelf

shell32

ShellExecuteW CommandLineToArgvW

ws2_32

socket setsockopt inet_addr WSAStartup htonl closesocket bind WSACleanup htons sendto