General
-
Target
119baecb4c7b50dfe94cbbee48623c5c7dafb0444f58779442f69219bce3e2d4
-
Size
201KB
-
Sample
220628-tevxbsafak
-
MD5
2fb0dfe90cea1e4e04a9a182d97e3bf0
-
SHA1
09677305499b920c1916e536e7fcf288f2857276
-
SHA256
119baecb4c7b50dfe94cbbee48623c5c7dafb0444f58779442f69219bce3e2d4
-
SHA512
66a4d8d11dc803a0470dcc2e95c8de6e4112d0ee66111e173f20d24af4cdd945eeee6f920fa978137638f00736ae5b350cf1908afe374b4cc1335544bd1bbce1
Static task
static1
Behavioral task
behavioral1
Sample
119baecb4c7b50dfe94cbbee48623c5c7dafb0444f58779442f69219bce3e2d4.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
119baecb4c7b50dfe94cbbee48623c5c7dafb0444f58779442f69219bce3e2d4.exe
Resource
win10v2004-20220414-en
Malware Config
Extracted
C:\Users\Admin\Desktop\_WHAT_is.html
http://mwddgguaa5rj7b54.onion/7DB7EUQ737IFS1DT
Extracted
C:\Users\Admin\Desktop\_WHAT_is.html
http://mwddgguaa5rj7b54.onion/UJHZ1779YZCBJ418
Targets
-
-
Target
119baecb4c7b50dfe94cbbee48623c5c7dafb0444f58779442f69219bce3e2d4
-
Size
201KB
-
MD5
2fb0dfe90cea1e4e04a9a182d97e3bf0
-
SHA1
09677305499b920c1916e536e7fcf288f2857276
-
SHA256
119baecb4c7b50dfe94cbbee48623c5c7dafb0444f58779442f69219bce3e2d4
-
SHA512
66a4d8d11dc803a0470dcc2e95c8de6e4112d0ee66111e173f20d24af4cdd945eeee6f920fa978137638f00736ae5b350cf1908afe374b4cc1335544bd1bbce1
Score10/10-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-
Sets desktop wallpaper using registry
-
Suspicious use of SetThreadContext
-