General
-
Target
289b14c50534850a499a14943b3775be
-
Size
5.0MB
-
Sample
220720-asxtashgc6
-
MD5
289b14c50534850a499a14943b3775be
-
SHA1
e0f14c10d9ba20507112ba61601a0ea28487acad
-
SHA256
5e014f792276618ccc7e7401207fb2758097f440ce28aeb70a024b6ed4251aa1
-
SHA512
c297568324027a54c2dd1f0afee95853e7bdd868c4c4870a4a94ed1670d5a3dfda6f653563a7670a5bf0b6c7bd32daf77401624362d665a563277d36e17df703
Static task
static1
Behavioral task
behavioral1
Sample
289b14c50534850a499a14943b3775be.dll
Resource
win7-20220718-en
Behavioral task
behavioral2
Sample
289b14c50534850a499a14943b3775be.dll
Resource
win10v2004-20220718-en
Malware Config
Targets
-
-
Target
289b14c50534850a499a14943b3775be
-
Size
5.0MB
-
MD5
289b14c50534850a499a14943b3775be
-
SHA1
e0f14c10d9ba20507112ba61601a0ea28487acad
-
SHA256
5e014f792276618ccc7e7401207fb2758097f440ce28aeb70a024b6ed4251aa1
-
SHA512
c297568324027a54c2dd1f0afee95853e7bdd868c4c4870a4a94ed1670d5a3dfda6f653563a7670a5bf0b6c7bd32daf77401624362d665a563277d36e17df703
Score10/10-
Contacts a large (3190) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Contacts a large (1240) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Executes dropped EXE
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Drops file in System32 directory
-