targetcompany | 4db69a0643f6ec795e5450a0563605e91293f233aa60715ae09ed8effa3b7267

Sharing

Copy URL Twitter E-mail

General

Target
4db69a0643f6ec795e5450a0563605e91293f233aa60715ae09ed8effa3b7267
Size 159KB
Sample221018-h6bf8aehc5
SHA256 4db69a0643f6ec795e5450a0563605e91293f233aa60715ae09ed8effa3b7267
MD5 14de179afe8e29f828080ad79d523a3f
SHA1 5d56729c8a80c738c05d5e10bb10664c40186c4b
SHA512 fb8ea8c95d1dd6551787528dd2bfeece2543ba0c59347005b63282ed4a5ef6d6c3c8fcdb31af3d409a78d15fef206d637568ae1131521739abfc1b99fd9c3d31
SSDEEP 3072:4ZpcABtMGjkIuuWxCwfKp8vdjwOYvGCbY0oTZRz35cRttX2laYZliyQkV:4ZpcvwNweMwdvTLAZJit9y3V
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

targetcompany

Malware Config

Signatures

TargetCompany payload 1 IoCs

resource	yara_rule
sample	family_targetcompany

Targetcompany family
targetcompany

File Explorer

4db69a0643f6ec795e5450a0563605e91293f233aa60715ae09ed8effa3b7267

.exe 159KB

4db69a0643f6ec795e5450a0563605e91293f233aa60715ae09ed8effa3b7267

IMPHASH e4bd7907b342d1a076dd6f509ba99a52
SHA256 4db69a0643f6ec795e5450a0563605e91293f233aa60715ae09ed8effa3b7267
MD5 14de179afe8e29f828080ad79d523a3f
SHA1 5d56729c8a80c738c05d5e10bb10664c40186c4b
SHA512 fb8ea8c95d1dd6551787528dd2bfeece2543ba0c59347005b63282ed4a5ef6d6c3c8fcdb31af3d409a78d15fef206d637568ae1131521739abfc1b99fd9c3d31
SSDEEP 3072:4ZpcABtMGjkIuuWxCwfKp8vdjwOYvGCbY0oTZRz35cRttX2laYZliyQkV:4ZpcvwNweMwdvTLAZJit9y3V
MD5 SHA1 SHA512 SSDEEP

windows x86

TargetCompany payload

Minor OS version

Major OS version

Entry point

36150

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindClose WaitForSingleObject CreateFileW GetCurrentThreadId lstrcatA GetModuleHandleA OpenProcess PostQueuedCompletionStatus CreateToolhelp32Snapshot MultiByteToWideChar Sleep GetLastError Process32NextW CreateFileA GetDiskFreeSpaceExW GetCurrentThread LoadLibraryA lstrcatW CloseHandle GetSystemInfo CreateThread GetWindowsDirectoryA GetWindowsDirectoryW GetProcAddress SetFilePointerEx LocalFree DeleteCriticalSection ExitProcess GetCurrentProcessId GetModuleHandleW CopyFileW WideCharToMultiByte lstrcpyW lstrcmpiW CreateIoCompletionPort lstrlenA lstrcmpW MoveFileW GetDriveTypeW GetFileTime GetComputerNameA QueryDosDeviceW FindFirstVolumeW DuplicateHandle CreateEventW SetEvent TerminateThread FindVolumeClose GetVolumePathNamesForVolumeNameW GetFileType FindNextVolumeW WriteConsoleW SetEndOfFile ReadConsoleW GetQueuedCompletionStatus SetErrorMode InitializeCriticalSection LeaveCriticalSection WaitForMultipleObjects GetModuleFileNameW GetUserDefaultLangID TerminateProcess WriteFile GetCurrentProcess FindNextFileW GetCommandLineW EnterCriticalSection FindFirstFileExW lstrlenW GetFileSizeEx GetLogicalDrives GetVolumeInformationW ReadFile HeapSize GetConsoleMode GetConsoleCP FlushFileBuffers GetStringTypeW SetStdHandle GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetCPInfo GetOEMCP GetACP QueryPerformanceCounter GetTickCount IsValidCodePage LCMapStringW HeapAlloc HeapFree HeapReAlloc GetStdHandle UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent InitializeCriticalSectionAndSpinCount ResetEvent WaitForSingleObjectEx IsDebuggerPresent GetStartupInfoW GetSystemTimeAsFileTime InitializeSListHead RtlUnwind RaiseException SetLastError EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetModuleHandleExW DecodePointer

user32

GetCursorPos

advapi32

CryptAcquireContextW OpenThreadToken LsaClose LookupPrivilegeValueW AdjustTokenPrivileges CreateServiceW LsaFreeMemory CloseServiceHandle CryptGenRandom OpenSCManagerW AllocateAndInitializeSid SetEntriesInAclW SetNamedSecurityInfoW OpenProcessToken FreeSid StartServiceW LsaQueryInformationPolicy LsaOpenPolicy CryptReleaseContext

shell32

CommandLineToArgvW ShellExecuteW ShellExecuteA

netapi32

NetShareEnum NetApiBufferFree

shlwapi

wnsprintfA StrCmpNIW StrCmpNW StrDupW StrStrIW SHDeleteKeyW wnsprintfW

iphlpapi

GetIpNetTable

ws2_32

inet_ntoa

wininet

HttpOpenRequestW InternetQueryOptionW InternetQueryDataAvailable InternetReadFile InternetCrackUrlW HttpSendRequestW InternetCloseHandle InternetConnectW InternetSetOptionW InternetOpenW