General
-
Target
85be1d2a3500ee2130928da3259f76400063abb259d7a0ed4451b2862c042b18
-
Size
130KB
-
Sample
221124-e17exscb9z
-
MD5
db1daf5cae03c28cd739e4e9a8a4f983
-
SHA1
47d91a1c7e510a11167cd6821745ccea69c3a07e
-
SHA256
85be1d2a3500ee2130928da3259f76400063abb259d7a0ed4451b2862c042b18
-
SHA512
7a8139c230573af079e24cab3a22bb5ce2289ee431fabe113027c8444e17074cb13d548878f21f379e222f5c342347bd1b7d421a41f6672c9dc57ba0e943829e
-
SSDEEP
3072:ZtYgtwCu+a9MMTb/OTlrjmPl3XymSPTTW6ulFoQea8OOf:zJa9MMf+m9nCTGkK8Pf
Static task
static1
Behavioral task
behavioral1
Sample
rechnung_vodafone_de_2014_11_930370025_023870007_11_de_0000003837_888830.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
rechnung_vodafone_de_2014_11_930370025_023870007_11_de_0000003837_888830.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
rechnung_vodafone_de_2014_11_930370025_023870007_11_de_0000003837_888830.exe
-
Size
176KB
-
MD5
13997ebf7af8d37dda6697ac03f76cc3
-
SHA1
9be2bcd498406bdfb05f860ad726273c4a7b4f3a
-
SHA256
11ecf58db103eb2ded5b942f303d48b5d77e336b8edfe335fa7b81264d1f50ef
-
SHA512
2894ef41ec784fb39ec663ff8ca5fa8c0ebbd875f95f6e2b843c8bca59d63cc7c43f64df43898290cef31c4b32478819f437fcc4656606d0f7cd4721c735ffee
-
SSDEEP
3072:rGwR1qmB1TQgHtMF5a6I4Ya5Tlrjmvl3XymSPTyAAwoc9+IkMd+zr3/1C:7KLa6I4x3mdnCNAwo42M
Score7/10-
Deletes itself
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-