General
-
Target
ef11f47072fe3c055c5f5e735eb43d22
-
Size
5.0MB
-
Sample
220720-djf1zabbf7
-
MD5
ef11f47072fe3c055c5f5e735eb43d22
-
SHA1
b54d9167b063f67dea42e98f21649105881094db
-
SHA256
efc3519b38a9b411542e89a1ed42b899dd78de56714efbaa64453d8380c83154
-
SHA512
2585a2d39ccac69b6b949e3384ff8016ea65ed7be6f36231876eb21d13ac35de656a900234f554f44c6b644672fa53118ec1ddb9cec2564d9e891c183314de66
Static task
static1
Behavioral task
behavioral1
Sample
ef11f47072fe3c055c5f5e735eb43d22.dll
Resource
win7-20220718-en
Behavioral task
behavioral2
Sample
ef11f47072fe3c055c5f5e735eb43d22.dll
Resource
win10v2004-20220414-en
Malware Config
Targets
-
-
Target
ef11f47072fe3c055c5f5e735eb43d22
-
Size
5.0MB
-
MD5
ef11f47072fe3c055c5f5e735eb43d22
-
SHA1
b54d9167b063f67dea42e98f21649105881094db
-
SHA256
efc3519b38a9b411542e89a1ed42b899dd78de56714efbaa64453d8380c83154
-
SHA512
2585a2d39ccac69b6b949e3384ff8016ea65ed7be6f36231876eb21d13ac35de656a900234f554f44c6b644672fa53118ec1ddb9cec2564d9e891c183314de66
Score10/10-
Contacts a large (3183) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Contacts a large (1030) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Executes dropped EXE
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Drops file in System32 directory
-