General
-
Target
c4e4c368d819fc240e28d10a9bc664dd
-
Size
5.0MB
-
Sample
220720-arrwnahgb7
-
MD5
c4e4c368d819fc240e28d10a9bc664dd
-
SHA1
9af03cca529dd055adb00ce7af74243eb5e5adff
-
SHA256
58980ccd7918c175715312b805539828d0cbca0775f6f0a2f27f3a47131137df
-
SHA512
e550ee0c08ed5c2cc8b61eb0a32cfb880295747a8176b4a3996e2fa77abf684c1e4ad323ce802a9c8185cf55afc953332f90e1b879cd8ab00f4bf7ca9aab9452
Static task
static1
Behavioral task
behavioral1
Sample
c4e4c368d819fc240e28d10a9bc664dd.dll
Resource
win7-20220718-en
Behavioral task
behavioral2
Sample
c4e4c368d819fc240e28d10a9bc664dd.dll
Resource
win10v2004-20220414-en
Malware Config
Targets
-
-
Target
c4e4c368d819fc240e28d10a9bc664dd
-
Size
5.0MB
-
MD5
c4e4c368d819fc240e28d10a9bc664dd
-
SHA1
9af03cca529dd055adb00ce7af74243eb5e5adff
-
SHA256
58980ccd7918c175715312b805539828d0cbca0775f6f0a2f27f3a47131137df
-
SHA512
e550ee0c08ed5c2cc8b61eb0a32cfb880295747a8176b4a3996e2fa77abf684c1e4ad323ce802a9c8185cf55afc953332f90e1b879cd8ab00f4bf7ca9aab9452
Score10/10-
Contacts a large (3079) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Contacts a large (1213) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Executes dropped EXE
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Drops file in System32 directory
-