General
-
Target
Run.exe
-
Size
1.5MB
-
Sample
221003-gwyckaagg6
-
MD5
6c07fecf1196e2082e91c301fc0e4c1c
-
SHA1
2587d0566128a20e595b8d73321e65d68881f83a
-
SHA256
f1a9de13eedcdb288fdec025ad642154b1eedc2d5c57f093c7c6c1fe3f642e6e
-
SHA512
c7688cef0ea909c6add1d23344c0917b6af076cecc1048880ea1eb9352e369c5c0804b2485048a3beeb46277002ecc5fff7831b1e17949b6100f4ac12dd4d110
-
SSDEEP
24576:WUAk8Ci1J5U42DCi5hsDUQYkHKgT+yZWR+CvP0kdbIcIKC66oaX0QOpXlmMG:WpQe3UDC8u1HqgeRjPpE366o91FlN
Static task
static1
Behavioral task
behavioral1
Sample
Run.exe
Resource
win10v2004-20220901-en
Malware Config
Targets
-
-
Target
Run.exe
-
Size
1.5MB
-
MD5
6c07fecf1196e2082e91c301fc0e4c1c
-
SHA1
2587d0566128a20e595b8d73321e65d68881f83a
-
SHA256
f1a9de13eedcdb288fdec025ad642154b1eedc2d5c57f093c7c6c1fe3f642e6e
-
SHA512
c7688cef0ea909c6add1d23344c0917b6af076cecc1048880ea1eb9352e369c5c0804b2485048a3beeb46277002ecc5fff7831b1e17949b6100f4ac12dd4d110
-
SSDEEP
24576:WUAk8Ci1J5U42DCi5hsDUQYkHKgT+yZWR+CvP0kdbIcIKC66oaX0QOpXlmMG:WpQe3UDC8u1HqgeRjPpE366o91FlN
Score7/10-
Obfuscated with Agile.Net obfuscator
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-