General
-
Target
a396c91b4750c7d2c166e523f2659ee64d88a840ab3d941b27b8b4e78e0ec24a
-
Size
2.1MB
-
Sample
220725-wcw3qadaeq
-
MD5
54de310a8f0a06c0141f2c00ee587736
-
SHA1
e38ad9557e9e1bc2bdcdafd726da2c6d9d3c6372
-
SHA256
a396c91b4750c7d2c166e523f2659ee64d88a840ab3d941b27b8b4e78e0ec24a
-
SHA512
d53b79ee7e15639dc4d94bb646b87830eabbc40af6730459d687710d8b30b1b519e66c49a487e5756fecf4758583d8b619e9a038ee0752ee86f78488a6f3bda1
Static task
static1
Behavioral task
behavioral1
Sample
a396c91b4750c7d2c166e523f2659ee64d88a840ab3d941b27b8b4e78e0ec24a.exe
Resource
win7-20220718-en
Behavioral task
behavioral2
Sample
a396c91b4750c7d2c166e523f2659ee64d88a840ab3d941b27b8b4e78e0ec24a.exe
Resource
win10v2004-20220721-en
Malware Config
Extracted
bitrat
1.38
89.248.173.187:4898
-
communication_password
81dc9bdb52d04dc20036dbd8313ed055
-
install_dir
desktop
-
install_file
wmzr.exe
-
tor_process
tor
Targets
-
-
Target
a396c91b4750c7d2c166e523f2659ee64d88a840ab3d941b27b8b4e78e0ec24a
-
Size
2.1MB
-
MD5
54de310a8f0a06c0141f2c00ee587736
-
SHA1
e38ad9557e9e1bc2bdcdafd726da2c6d9d3c6372
-
SHA256
a396c91b4750c7d2c166e523f2659ee64d88a840ab3d941b27b8b4e78e0ec24a
-
SHA512
d53b79ee7e15639dc4d94bb646b87830eabbc40af6730459d687710d8b30b1b519e66c49a487e5756fecf4758583d8b619e9a038ee0752ee86f78488a6f3bda1
Score10/10-
Adds Run key to start application
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext
-