General
-
Target
8270_1647716184_9657.exe
-
Size
447KB
-
Sample
220404-drlleshcd4
-
MD5
58008524a6473bdf86c1040a9a9e39c3
-
SHA1
cb704d2e8df80fd3500a5b817966dc262d80ddb8
-
SHA256
1ef6c1a4dfdc39b63bfe650ca81ab89510de6c0d3d7c608ac5be80033e559326
-
SHA512
8cf492584303523bf6cdfeb6b1b779ee44471c91e759ce32fd4849547b6245d4ed86af5b38d1c6979729a77f312ba91c48207a332ae1589a6e25de67ffb96c31
Static task
static1
Behavioral task
behavioral1
Sample
8270_1647716184_9657.exe
Resource
win7-20220331-en
Behavioral task
behavioral2
Sample
8270_1647716184_9657.exe
Resource
win10v2004-20220331-en
Malware Config
Targets
-
-
Target
8270_1647716184_9657.exe
-
Size
447KB
-
MD5
58008524a6473bdf86c1040a9a9e39c3
-
SHA1
cb704d2e8df80fd3500a5b817966dc262d80ddb8
-
SHA256
1ef6c1a4dfdc39b63bfe650ca81ab89510de6c0d3d7c608ac5be80033e559326
-
SHA512
8cf492584303523bf6cdfeb6b1b779ee44471c91e759ce32fd4849547b6245d4ed86af5b38d1c6979729a77f312ba91c48207a332ae1589a6e25de67ffb96c31
Score10/10-
Suspicious use of NtCreateUserProcessOtherParentProcess
-