SecuriteInfo[.]com[.]Trojan[.]MulDrop20[.]7806[.]16094[.]24014

Sharing

Copy URL Twitter E-mail

General

Target
SecuriteInfo.com.Trojan.MulDrop20.7806.16094.24014
Size 143KB
Sample220817-kl1lqagbe6
SHA256 cf5dfc3feff20dd62375a05e9dad36dcda140c283d3d197624e06712f679aa9a
MD5 9f071a1392a2061dd574b32fd1004d64
SHA1 1c291bc6e82e1a1c8d9eb9c0ef092e21e64116cb
SHA512 0eb4fad0b6b44c4422410694c014c2ab6a912917aea53ee45a6bdc1e85c15a6b6460b5cc327c69eebb4b6f29082a7d2c7eaec8d0d135698548f887a67c1f7c6b
SSDEEP 3072:9uO/rZAi3Tqn2ZiaPiJcuy/CBzjYqqKb33wqwwItM:w6dQ2Ziamcu8K8KbP
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

SecuriteInfo.com.Trojan.MulDrop20.7806.16094.24014

.exe 143KB

SecuriteInfo.com.Trojan.MulDrop20.7806.16094.24014

IMPHASH 18fb8f04991eef6621d9adfb6b5f7ff8
SHA256 cf5dfc3feff20dd62375a05e9dad36dcda140c283d3d197624e06712f679aa9a
MD5 9f071a1392a2061dd574b32fd1004d64
SHA1 1c291bc6e82e1a1c8d9eb9c0ef092e21e64116cb
SHA512 0eb4fad0b6b44c4422410694c014c2ab6a912917aea53ee45a6bdc1e85c15a6b6460b5cc327c69eebb4b6f29082a7d2c7eaec8d0d135698548f887a67c1f7c6b
SSDEEP 3072:9uO/rZAi3Tqn2ZiaPiJcuy/CBzjYqqKb33wqwwItM:w6dQ2Ziamcu8K8KbP
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

32011

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

netapi32

NetApiBufferFree NetWkstaGetInfo

ws2_32

__WSAFDIsSet ntohs WSACleanup WSAIoctl WSAGetLastError WSAStartup gethostbyname socket shutdown setsockopt send select recv htons ioctlsocket connect closesocket

shlwapi

StrToIntA

kernel32

FreeEnvironmentStringsW GetEnvironmentStringsW GetCPInfo GetOEMCP GetACP IsValidCodePage FindFirstFileExW HeapReAlloc ReadConsoleW SetFilePointerEx InitializeCriticalSection EnterCriticalSection LeaveCriticalSection ExitProcess GetCommandLineA CreateDirectoryW DeleteFileW GetFileAttributesW SetFileAttributesW CloseHandle Sleep FreeLibrary GetModuleFileNameW SetEnvironmentVariableW LoadLibraryA MultiByteToWideChar WideCharToMultiByte GetCommandLineW GetLastError ReleaseMutex CreateMutexA CreateProcessA GetModuleFileNameA LocalFree GetCurrentProcessId GetCurrentThreadId GetTickCount ReadFile WriteFile CreatePipe PeekNamedPipe TerminateProcess GetStartupInfoA GetSystemInfo GetVersionExA GetComputerNameW FindClose FindNextFileW ResumeThread GetFileSizeEx GetConsoleMode GetConsoleOutputCP GetFileType SetStdHandle GetStringTypeW GetProcessHeap DecodePointer FlushFileBuffers CreateFileW HeapSize SetEndOfFile WriteConsoleW GetProcAddress LCMapStringW CompareStringW HeapAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess IsProcessorFeaturePresent QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RtlUnwind SetLastError DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW RaiseException CreateThread ExitThread FreeLibraryAndExitThread GetModuleHandleExW GetStdHandle HeapFree

user32

GetLastInputInfo GetWindowTextW GetSystemMetrics GetForegroundWindow

advapi32

GetUserNameW

shell32

SHFileOperationW ShellExecuteW CommandLineToArgvW

ole32

CoInitialize CoCreateInstance