General
-
Target
4bc79bf2d2c328fc1a94b235884db6a27f5b0b9ed2e511ecec59ac573f38ed28
-
Size
119KB
-
Sample
220712-kqk2tsdeb3
-
MD5
42221a3c2ef7c0b9f5292ee5f6382fc7
-
SHA1
6621ab1500e25cc20601754f584e8197d493840a
-
SHA256
4bc79bf2d2c328fc1a94b235884db6a27f5b0b9ed2e511ecec59ac573f38ed28
-
SHA512
1a970195f546cb9310c8bdaee7f1cadd12ebbbd7ef84fad0ed60000c36b8e198e230bcf244a7b2962408d70438c2e8064f4bdca9bedcfdb7dbb4e2bbc8be776e
Static task
static1
Behavioral task
behavioral1
Sample
4bc79bf2d2c328fc1a94b235884db6a27f5b0b9ed2e511ecec59ac573f38ed28.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
4bc79bf2d2c328fc1a94b235884db6a27f5b0b9ed2e511ecec59ac573f38ed28.exe
Resource
win10v2004-20220414-en
Malware Config
Targets
-
-
Target
4bc79bf2d2c328fc1a94b235884db6a27f5b0b9ed2e511ecec59ac573f38ed28
-
Size
119KB
-
MD5
42221a3c2ef7c0b9f5292ee5f6382fc7
-
SHA1
6621ab1500e25cc20601754f584e8197d493840a
-
SHA256
4bc79bf2d2c328fc1a94b235884db6a27f5b0b9ed2e511ecec59ac573f38ed28
-
SHA512
1a970195f546cb9310c8bdaee7f1cadd12ebbbd7ef84fad0ed60000c36b8e198e230bcf244a7b2962408d70438c2e8064f4bdca9bedcfdb7dbb4e2bbc8be776e
Score10/10-
suricata: ET MALWARE Generic - POST To .php w/Extended ASCII Characters
suricata: ET MALWARE Generic - POST To .php w/Extended ASCII Characters
-
suricata: ET MALWARE Ransomware Locky CnC Beacon 2
suricata: ET MALWARE Ransomware Locky CnC Beacon 2
-
suricata: ET MALWARE Win32/Necurs Common POST Header Structure
suricata: ET MALWARE Win32/Necurs Common POST Header Structure
-
Suspicious use of SetThreadContext
-