General
-
Target
1f43e64a0e00705b37e0e15ec39690c0cfd03030c56f0fb2fd0ba21de7db98e4
-
Size
126KB
-
Sample
221124-eyqdmaca6v
-
MD5
8e106022d3c898334af50fdb78eaacf3
-
SHA1
384954667497f85baa45d42a84497df1c86d9c7d
-
SHA256
1f43e64a0e00705b37e0e15ec39690c0cfd03030c56f0fb2fd0ba21de7db98e4
-
SHA512
ad8b7b21bae6cbc44e8e8a6cf3602f07aefc02d40a881aa9abd0f1544643af6d703cf6a31b1119032095954fed7dd05e95a7f4529e34653616b6a025181ba249
-
SSDEEP
3072:73FJ821ZZR7TwOCMiECI115hswWey5ZU6GEAE+YBqid4O:7VJ8GZR7TwOCMiECI3pT2jhC/Y
Static task
static1
Behavioral task
behavioral1
Sample
rechnung_vodafone_team_0000399387201_0020398478002_0003_77352_192_0200002.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
rechnung_vodafone_team_0000399387201_0020398478002_0003_77352_192_0200002.exe
Resource
win10v2004-20221111-en
Malware Config
Targets
-
-
Target
rechnung_vodafone_team_0000399387201_0020398478002_0003_77352_192_0200002.exe
-
Size
168KB
-
MD5
bbf602cc98f05af58228dfc975622b04
-
SHA1
70fb72c5217aed3c52349a3a92fda087297203b5
-
SHA256
64dbe523c9ff1558fedaba3d2fc6476893cb2286703e69bcb30eb3015f5bd82a
-
SHA512
bc1e3819532e0cbcc7377c5e64cb100ef211a9e6b502f0d36a14ec0b80d2378e28d3263d64071448901a8096e904a7e845124a5d7ecc2c670459f1d6e783cfcd
-
SSDEEP
3072:lfmAD4c6xEGUAV31hECI115hswWe25ZU6GEAE+YBTVdX7lqEd+zr3/1C:lfYc6EGUYhECI3pTqjhC0fUlM
Score7/10-
Deletes itself
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-