General
-
Target
f146554936f77e10bf6ea203cc20d6ad4b908c578fb5bbbf5a9ed00a7da372e6
-
Size
39KB
-
Sample
221020-vjss7sefa4
-
MD5
572cff780795f9d32ab5c5b2a9cf01c0
-
SHA1
5b07eab400222538032169a5c23688906a0b589e
-
SHA256
f146554936f77e10bf6ea203cc20d6ad4b908c578fb5bbbf5a9ed00a7da372e6
-
SHA512
8760c59f52661bd695090b52d44851b109081bb3cff6766739e50091bde85dcc5575e22b3a82f72f57f01d36f046cfee2cedb54e718849a774dbc62ae76ae9c7
-
SSDEEP
768:1dfLquajD4eBISvNdy44eBISvNdyNusX50:1JLva/nN7PnN7mus
Static task
static1
Behavioral task
behavioral1
Sample
f146554936f77e10bf6ea203cc20d6ad4b908c578fb5bbbf5a9ed00a7da372e6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f146554936f77e10bf6ea203cc20d6ad4b908c578fb5bbbf5a9ed00a7da372e6.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
f146554936f77e10bf6ea203cc20d6ad4b908c578fb5bbbf5a9ed00a7da372e6
-
Size
39KB
-
MD5
572cff780795f9d32ab5c5b2a9cf01c0
-
SHA1
5b07eab400222538032169a5c23688906a0b589e
-
SHA256
f146554936f77e10bf6ea203cc20d6ad4b908c578fb5bbbf5a9ed00a7da372e6
-
SHA512
8760c59f52661bd695090b52d44851b109081bb3cff6766739e50091bde85dcc5575e22b3a82f72f57f01d36f046cfee2cedb54e718849a774dbc62ae76ae9c7
-
SSDEEP
768:1dfLquajD4eBISvNdy44eBISvNdyNusX50:1JLva/nN7PnN7mus
Score7/10-
Deletes itself
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of SetThreadContext
-