General
-
Target
5766b6d1c27a6e3b8f08f75b41f190ac48e7f4ed2d855a88e02dff25f88e8904
-
Size
1.5MB
-
Sample
220724-2q7n9sbgbk
-
MD5
78ad3bdb9ba3be7e4f88e9a777e9c0db
-
SHA1
f00c8ccbd2b8394c9aac9b6fad557375f9d77fa2
-
SHA256
5766b6d1c27a6e3b8f08f75b41f190ac48e7f4ed2d855a88e02dff25f88e8904
-
SHA512
f628dad81b2a6fea32daa8fd659c6c3bd4081ddd1aab693b2b757e408c731f2e19aa286c7baeafcdc3fd333bc01ef73042fcae8908d4a797963a9c617a875519
Static task
static1
Behavioral task
behavioral1
Sample
5766b6d1c27a6e3b8f08f75b41f190ac48e7f4ed2d855a88e02dff25f88e8904.exe
Resource
win7-20220718-en
Behavioral task
behavioral2
Sample
5766b6d1c27a6e3b8f08f75b41f190ac48e7f4ed2d855a88e02dff25f88e8904.exe
Resource
win10v2004-20220721-en
Malware Config
Targets
-
-
Target
5766b6d1c27a6e3b8f08f75b41f190ac48e7f4ed2d855a88e02dff25f88e8904
-
Size
1.5MB
-
MD5
78ad3bdb9ba3be7e4f88e9a777e9c0db
-
SHA1
f00c8ccbd2b8394c9aac9b6fad557375f9d77fa2
-
SHA256
5766b6d1c27a6e3b8f08f75b41f190ac48e7f4ed2d855a88e02dff25f88e8904
-
SHA512
f628dad81b2a6fea32daa8fd659c6c3bd4081ddd1aab693b2b757e408c731f2e19aa286c7baeafcdc3fd333bc01ef73042fcae8908d4a797963a9c617a875519
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext
-