Extracted

• • Target

    Quick SFV.exe

  • Size

    20.1MB

  • MD5

    123cd9c01676dac4081fbe2d3b6f8fc9

  • SHA1

    455bd5f0741e74b3ba577d120384fa1de59b00ec

  • SHA256

    729955eb4afcb332b615ee3d1b1cf4148b1c87566dc49ce804c1e1193e28f435

  • SHA512

    c18ee8fedbb208d51ed4181705b243b8ed0ff94c52041660e718eb52129de1f080b42cfddc7c9f425f67c39f6808e1a6d457e8c477403f3f111a05e00b158ebf

  Score

  10^/10

  nwormdownloaderworm

  • NWorm

    A TrickBot module used to propagate to vulnerable domain controllers.

    wormdownloadernworm

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1