General
-
Target
e421ee934b7ab1a577b03b9c89a20eb3a283f1ed9ed0faf365a573ec90cb26da
-
Size
173KB
-
Sample
220731-hkmbladcd4
-
MD5
d1c6e0ce4ff9cc463a98694ac35bfa15
-
SHA1
ff8672a8e252c9bf3dc3eefbbc0d237efda2a520
-
SHA256
e421ee934b7ab1a577b03b9c89a20eb3a283f1ed9ed0faf365a573ec90cb26da
-
SHA512
6d93aff9c1668d9de4922ddf5f4a35bffbd427524540d375bc9eca4fb620595887ecd957e18dcf48b2266eb0a4a8e2ba581d66af0b8b225e8de4dbde2a9b55ce
Static task
static1
Behavioral task
behavioral1
Sample
e421ee934b7ab1a577b03b9c89a20eb3a283f1ed9ed0faf365a573ec90cb26da.exe
Resource
win7-20220715-en
Behavioral task
behavioral2
Sample
e421ee934b7ab1a577b03b9c89a20eb3a283f1ed9ed0faf365a573ec90cb26da.exe
Resource
win10v2004-20220721-en
Malware Config
Targets
-
-
Target
e421ee934b7ab1a577b03b9c89a20eb3a283f1ed9ed0faf365a573ec90cb26da
-
Size
173KB
-
MD5
d1c6e0ce4ff9cc463a98694ac35bfa15
-
SHA1
ff8672a8e252c9bf3dc3eefbbc0d237efda2a520
-
SHA256
e421ee934b7ab1a577b03b9c89a20eb3a283f1ed9ed0faf365a573ec90cb26da
-
SHA512
6d93aff9c1668d9de4922ddf5f4a35bffbd427524540d375bc9eca4fb620595887ecd957e18dcf48b2266eb0a4a8e2ba581d66af0b8b225e8de4dbde2a9b55ce
Score9/10-
Deletes itself
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Suspicious use of SetThreadContext
-