General
- Target file.exe
- Size 661KB
- Sample220930-eryfnaceb7
- SHA256 cf0816c5e2349f00e9aa756dae4eecb8d5df624356bcbb21dadf77b1fcbfd5f8
- MD5 e46c2ada51b0da4cc1ba1a33bc4f20b1
- SHA1 8ffb434c3cbf6cb472479860338e5892cfaf9389
- SHA512 50b93d2cc585a2314915c101fb4b61c1ae8daf844cf3b4c019eda43f5571fc8fafaeadc6b2b3796fcfe222d24f51da96d50c937da3c04db0e055c8a987c19d49
- SSDEEP 12288:Z9ykRFRTdWzSdp3Y193pkgioSGOZjZGofxTxPLwZWweibhSa:ryKFRTszCo15pkgio4BZGofxlPUk+h5
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20220812-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 661KB
- SHA256 cf0816c5e2349f00e9aa756dae4eecb8d5df624356bcbb21dadf77b1fcbfd5f8
- MD5 e46c2ada51b0da4cc1ba1a33bc4f20b1
- SHA1 8ffb434c3cbf6cb472479860338e5892cfaf9389
- SHA512 50b93d2cc585a2314915c101fb4b61c1ae8daf844cf3b4c019eda43f5571fc8fafaeadc6b2b3796fcfe222d24f51da96d50c937da3c04db0e055c8a987c19d49
- SSDEEP 12288:Z9ykRFRTdWzSdp3Y193pkgioSGOZjZGofxTxPLwZWweibhSa:ryKFRTszCo15pkgio4BZGofxlPUk+h5
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Modifies file permissions
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of SetThreadContext