General
-
Target
444e7000f1959e9f80675efb71862ddf
-
Size
5.0MB
-
Sample
220720-al7d6aabfm
-
MD5
444e7000f1959e9f80675efb71862ddf
-
SHA1
a9a4a8cbd2debe03024590dc4409cc195de1ee82
-
SHA256
a700d1f840a7ffd4990d0a05ee18af261c92a5c708c1465a107ffd88903959ea
-
SHA512
d87af6fa3a7856859ad04892fc353f629883de23d4387e526acc0a879c4ea097dc46d74d76f1eff88160fca1cdb3ad728e63ddda197cabf511d803cd53f6580e
Static task
static1
Behavioral task
behavioral1
Sample
444e7000f1959e9f80675efb71862ddf.dll
Resource
win7-20220715-en
Behavioral task
behavioral2
Sample
444e7000f1959e9f80675efb71862ddf.dll
Resource
win10v2004-20220718-en
Malware Config
Targets
-
-
Target
444e7000f1959e9f80675efb71862ddf
-
Size
5.0MB
-
MD5
444e7000f1959e9f80675efb71862ddf
-
SHA1
a9a4a8cbd2debe03024590dc4409cc195de1ee82
-
SHA256
a700d1f840a7ffd4990d0a05ee18af261c92a5c708c1465a107ffd88903959ea
-
SHA512
d87af6fa3a7856859ad04892fc353f629883de23d4387e526acc0a879c4ea097dc46d74d76f1eff88160fca1cdb3ad728e63ddda197cabf511d803cd53f6580e
Score10/10-
Contacts a large (3150) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Contacts a large (1230) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Executes dropped EXE
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Drops file in System32 directory
-