General
-
Target
af96ed257c6ecdc63344917c6e5767f97db50c7a798720cf2e631f2a73d37d84
-
Size
391KB
-
Sample
220419-p826aache4
-
MD5
cd9e3536590327613be84363a14d2e1f
-
SHA1
f5c94e2c0bd168e9858df03769b53d600befb86f
-
SHA256
af96ed257c6ecdc63344917c6e5767f97db50c7a798720cf2e631f2a73d37d84
-
SHA512
a8418d8ff4e8130aa5dde0f872940237a59a8ca3e1c659ef603d161167693efb4f33f02a70facbc860e281584dbb0ecd69776526fb81a1ae73a44e182d73e109
Static task
static1
Behavioral task
behavioral1
Sample
af96ed257c6ecdc63344917c6e5767f97db50c7a798720cf2e631f2a73d37d84.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
af96ed257c6ecdc63344917c6e5767f97db50c7a798720cf2e631f2a73d37d84.exe
Resource
win10v2004-20220414-en
Malware Config
Extracted
C:\Users\Admin\AppData\Local\Temp\lpksetup\lpk-tmp-00000000\wow64_microsoft-windows-a..nce-tools.resources_31bf3856ad364e35_6.1.7600.16385_it-it_0cf159f3820f394b\readme-warning.txt
makop
Targets
-
-
Target
af96ed257c6ecdc63344917c6e5767f97db50c7a798720cf2e631f2a73d37d84
-
Size
391KB
-
MD5
cd9e3536590327613be84363a14d2e1f
-
SHA1
f5c94e2c0bd168e9858df03769b53d600befb86f
-
SHA256
af96ed257c6ecdc63344917c6e5767f97db50c7a798720cf2e631f2a73d37d84
-
SHA512
a8418d8ff4e8130aa5dde0f872940237a59a8ca3e1c659ef603d161167693efb4f33f02a70facbc860e281584dbb0ecd69776526fb81a1ae73a44e182d73e109
Score10/10-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Adds Run key to start application
-