General
-
Target
9f26ed03498e4e07ad8dea5cd72788a5978e0efd12f69b63d8b62aa0b24595fb
-
Size
165KB
-
Sample
221124-1dt2zaea71
-
MD5
100bdbff5f76d5e0102878cc6566ad1b
-
SHA1
d6be6e6331ffd82dcf4dd4732226c779ddfa277a
-
SHA256
9f26ed03498e4e07ad8dea5cd72788a5978e0efd12f69b63d8b62aa0b24595fb
-
SHA512
5f4755cd09707e4cfe13ae25afded8af7f33e1efef0317329696341ad80dfee09ab9b59f6074733316bc1bdf06f978c26d7ba49f4a1a13a703bb90ca14c324e4
-
SSDEEP
3072:mLTL/H1R/BNlJVPAL15nWrpLn8niDoElxJm:mPL9R55VPkc8ni1lxM
Static task
static1
Behavioral task
behavioral1
Sample
9f26ed03498e4e07ad8dea5cd72788a5978e0efd12f69b63d8b62aa0b24595fb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9f26ed03498e4e07ad8dea5cd72788a5978e0efd12f69b63d8b62aa0b24595fb.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
9f26ed03498e4e07ad8dea5cd72788a5978e0efd12f69b63d8b62aa0b24595fb
-
Size
165KB
-
MD5
100bdbff5f76d5e0102878cc6566ad1b
-
SHA1
d6be6e6331ffd82dcf4dd4732226c779ddfa277a
-
SHA256
9f26ed03498e4e07ad8dea5cd72788a5978e0efd12f69b63d8b62aa0b24595fb
-
SHA512
5f4755cd09707e4cfe13ae25afded8af7f33e1efef0317329696341ad80dfee09ab9b59f6074733316bc1bdf06f978c26d7ba49f4a1a13a703bb90ca14c324e4
-
SSDEEP
3072:mLTL/H1R/BNlJVPAL15nWrpLn8niDoElxJm:mPL9R55VPkc8ni1lxM
Score10/10-
Modifies firewall policy service
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-