General
-
Target
db28383ba1d804c5c224bfb865d71f14
-
Size
3.6MB
-
Sample
220825-x8bbkahggj
-
MD5
db28383ba1d804c5c224bfb865d71f14
-
SHA1
8e7286ca8cb98cc4804c8bb917e43ead79480506
-
SHA256
cf713cb4ecf1aee0756285012464f6b9e9e46a6d15afa432faf8c4d3576e8f73
-
SHA512
b7436ca4b2acf89080caafb37e2252ebf5ffa5e2caf06bcc7e57c033f83a5724e34cda237eab03cd484e427a8ad35d2fcf7ddb4008e12493344776b73853442f
-
SSDEEP
24576:xbLgddQhfdmMSirYbcMNgef0QeQjG/D8kIqvO1Dq:xnAQqMSPbcBVQej/zOhq
Static task
static1
Behavioral task
behavioral1
Sample
db28383ba1d804c5c224bfb865d71f14.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
db28383ba1d804c5c224bfb865d71f14.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
db28383ba1d804c5c224bfb865d71f14
-
Size
3.6MB
-
MD5
db28383ba1d804c5c224bfb865d71f14
-
SHA1
8e7286ca8cb98cc4804c8bb917e43ead79480506
-
SHA256
cf713cb4ecf1aee0756285012464f6b9e9e46a6d15afa432faf8c4d3576e8f73
-
SHA512
b7436ca4b2acf89080caafb37e2252ebf5ffa5e2caf06bcc7e57c033f83a5724e34cda237eab03cd484e427a8ad35d2fcf7ddb4008e12493344776b73853442f
-
SSDEEP
24576:xbLgddQhfdmMSirYbcMNgef0QeQjG/D8kIqvO1Dq:xnAQqMSPbcBVQej/zOhq
Score10/10-
Modifies firewall policy service
-
Contacts a large (3119) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Contacts a large (1223) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Drops file in System32 directory
-