General
-
Target
SKM_22903091909461.exe
-
Size
286KB
-
Sample
221004-gwf4aafah2
-
MD5
dcbe72fe8885d385c4846f685bd86703
-
SHA1
bb2abd72752d26185f294b8b4d56cb4dddeb9098
-
SHA256
cddae169f7d487788ec3c3bbcdb635bf7e1e56d5559c896df6838d0493b4b793
-
SHA512
60fcffc7962946932c103fd307ce04ac1f88c6cef4d83d11d4c0beae61dd680e5e9a7a3eca8cf30dca8245eb087e460a114fce8fa1bf983746a1698f60ce6dd4
-
SSDEEP
6144:XoIuxQbmW7bCd5QpS2yfyGFfhNsilj/OKiHd9RLd+JnWX:XRumbmWPCjQpenxl/9IjgW
Static task
static1
Behavioral task
behavioral1
Sample
SKM_22903091909461.exe
Resource
win7-20220901-en
Malware Config
Extracted
formbook
bwak
NCcjR+OBqZ74WJDsfPJo
JY0OQKQB32L1ntp62t8usBfKoU9VI68J
dcG61oUPFxaTZg==
XE/9YHBRgKsnnShYQBE=
5dHmpJyR7TeXwL8=
mAqXGjShf1/stqg=
bRZ9qfhpXHGA5y9ufCJZbc4w
TYNV3Jbof+31KUVsb8guKjnm5A==
ThV4+K0ePoi3Po7sfPJo
VkU9SX1govoeHtHsfPJo
EInV01vKjwK5T98pHg==
helinBiLSuTzKDc7hdk8ag==
Pe9iDMw9N1BcavFERssBTds6
Gc0N53DNN56SsPOYJYF9Lp0t
obKr2CMIQ6DI3jTZKQB4QKM9sNDB
jI9cvsWklgy5T98pHg==
YMtH5rMbDI4MV5O2zgZg
kAKH4Ib7fqZbZtN40NlAmoT4aSgnoQ==
HBw9EyX/7Q81lNZ3xgppv9GpaSgnoQ==
HNEspLCl6DAgvUTeUQJGfQ==
1YrZMzU1myUu1BjD
nW0FW+hDsRomRj5XUtABTds6
7NfxHMQquDkxQHw/RgY=
6ku7ZEGwaMhd1xixBkyd087IiWA=
9zlNKUM0UKZw+xE+TGaYVofvuNOErewB
Vs8F6xv+aOcJUYkSXho7Dx7IlsvJ
re/e2Fa1Zq5fV3vCGsf9JVQ=
+asEG25FpSwr9SsyPwQ=
Bgi5J0A1Ol+XGBFftf4BTds6
SANTtL3FCTZGqpOzuOwOc115LJLkqQ==
59N74I0I5ErvlZSi3tA7Kjnm5A==
QuF5xD6M+hJslY3NGw==
NdEP6V/LfuBv6+HsfPJo
b2sbdlYsiBMtR3w/RgY=
GltficmuIqG33jA+fB8=
FQYLa7N8aLnp
8/DjBAb3VN8MVo7sfPJo
CbEGlqfbo9M75vkZUQJGfQ==
y4DpiUu0qtgNV5O2zgZg
ATlnJwPXGb5K+QsuHA539QaBRL9dIc4=
h/UnGbb/co+v0DzmK+ggMYMsHL9dIc4=
oR5qdrq5h+YYdHDB
2kDDYoVZWvN8thCx450Avkk=
a22UUCz151HnkZe5u70eKjnm5A==
1Uf2Tt9VCVHCDF26OAA=
igI1FkEmcNb7JDhbSMsBTds6
X7kYqGO6lgB2/PK7Hmx/+99B7A==
109xSck4+ErCDF26OAA=
bap11N/sweEsSHw/RgY=
DBA1782+AFZTWEtYScwBTds6
VQJkGPjdHWJ34zXUIMf9JVQ=
zX8CTLgsGqtG6FOXqlekOKFeK79dIc4=
5mPHfEoxd7XphoybrNUuKjnm5A==
T9OK3nfwiSE/XMRblY+TEVo=
Qb5Zrj2SAy7i6vtMknnse7hdzN3L
ZNcA3lu4RtX3KHTsfPJo
NiveS2hfi9P4Z8ERNDtW30M=
qRdLd7sq2gRrBQkpHQ==
RWkjdWA3YayMRkqe4hNg
daMryAy9NMo=
Yp6jhEKrPTeXwL8=
S8VnsRuGevhs/v8YUQJGfQ==
5hv28ycVgKfzKT5dZw4=
6xfnbB98av1uj3ve
elpediodico.com
Extracted
xloader
3.8
bwak
NCcjR+OBqZ74WJDsfPJo
JY0OQKQB32L1ntp62t8usBfKoU9VI68J
dcG61oUPFxaTZg==
XE/9YHBRgKsnnShYQBE=
5dHmpJyR7TeXwL8=
mAqXGjShf1/stqg=
bRZ9qfhpXHGA5y9ufCJZbc4w
TYNV3Jbof+31KUVsb8guKjnm5A==
ThV4+K0ePoi3Po7sfPJo
VkU9SX1govoeHtHsfPJo
EInV01vKjwK5T98pHg==
helinBiLSuTzKDc7hdk8ag==
Pe9iDMw9N1BcavFERssBTds6
Gc0N53DNN56SsPOYJYF9Lp0t
obKr2CMIQ6DI3jTZKQB4QKM9sNDB
jI9cvsWklgy5T98pHg==
YMtH5rMbDI4MV5O2zgZg
kAKH4Ib7fqZbZtN40NlAmoT4aSgnoQ==
HBw9EyX/7Q81lNZ3xgppv9GpaSgnoQ==
HNEspLCl6DAgvUTeUQJGfQ==
1YrZMzU1myUu1BjD
nW0FW+hDsRomRj5XUtABTds6
7NfxHMQquDkxQHw/RgY=
6ku7ZEGwaMhd1xixBkyd087IiWA=
9zlNKUM0UKZw+xE+TGaYVofvuNOErewB
Vs8F6xv+aOcJUYkSXho7Dx7IlsvJ
re/e2Fa1Zq5fV3vCGsf9JVQ=
+asEG25FpSwr9SsyPwQ=
Bgi5J0A1Ol+XGBFftf4BTds6
SANTtL3FCTZGqpOzuOwOc115LJLkqQ==
59N74I0I5ErvlZSi3tA7Kjnm5A==
QuF5xD6M+hJslY3NGw==
NdEP6V/LfuBv6+HsfPJo
b2sbdlYsiBMtR3w/RgY=
GltficmuIqG33jA+fB8=
FQYLa7N8aLnp
8/DjBAb3VN8MVo7sfPJo
CbEGlqfbo9M75vkZUQJGfQ==
y4DpiUu0qtgNV5O2zgZg
ATlnJwPXGb5K+QsuHA539QaBRL9dIc4=
h/UnGbb/co+v0DzmK+ggMYMsHL9dIc4=
oR5qdrq5h+YYdHDB
2kDDYoVZWvN8thCx450Avkk=
a22UUCz151HnkZe5u70eKjnm5A==
1Uf2Tt9VCVHCDF26OAA=
igI1FkEmcNb7JDhbSMsBTds6
X7kYqGO6lgB2/PK7Hmx/+99B7A==
109xSck4+ErCDF26OAA=
bap11N/sweEsSHw/RgY=
DBA1782+AFZTWEtYScwBTds6
VQJkGPjdHWJ34zXUIMf9JVQ=
zX8CTLgsGqtG6FOXqlekOKFeK79dIc4=
5mPHfEoxd7XphoybrNUuKjnm5A==
T9OK3nfwiSE/XMRblY+TEVo=
Qb5Zrj2SAy7i6vtMknnse7hdzN3L
ZNcA3lu4RtX3KHTsfPJo
NiveS2hfi9P4Z8ERNDtW30M=
qRdLd7sq2gRrBQkpHQ==
RWkjdWA3YayMRkqe4hNg
daMryAy9NMo=
Yp6jhEKrPTeXwL8=
S8VnsRuGevhs/v8YUQJGfQ==
5hv28ycVgKfzKT5dZw4=
6xfnbB98av1uj3ve
elpediodico.com
Targets
-
-
Target
SKM_22903091909461.exe
-
Size
286KB
-
MD5
dcbe72fe8885d385c4846f685bd86703
-
SHA1
bb2abd72752d26185f294b8b4d56cb4dddeb9098
-
SHA256
cddae169f7d487788ec3c3bbcdb635bf7e1e56d5559c896df6838d0493b4b793
-
SHA512
60fcffc7962946932c103fd307ce04ac1f88c6cef4d83d11d4c0beae61dd680e5e9a7a3eca8cf30dca8245eb087e460a114fce8fa1bf983746a1698f60ce6dd4
-
SSDEEP
6144:XoIuxQbmW7bCd5QpS2yfyGFfhNsilj/OKiHd9RLd+JnWX:XRumbmWPCjQpenxl/9IjgW
-
Loads dropped DLL
-
Suspicious use of SetThreadContext
-