General
-
Target
73168c28be91a05dba8e137504a0b99b48eccad86bbe6685f342e4c1c0a6a593
-
Size
118KB
-
Sample
221124-n21hfafa8y
-
MD5
f6a2d43d9cfcd998663d29c46b03ecaa
-
SHA1
06c366dffe63049e2db0314673033e776836746e
-
SHA256
73168c28be91a05dba8e137504a0b99b48eccad86bbe6685f342e4c1c0a6a593
-
SHA512
4fcc8b4ba1d19b38b320656584f2dd12e0beb62b638e05730a4ea84fa2b04f8fbd9f6034bead8843dc7c8e2224044a93ab6548a80e2f9117bf7ea32524f440e0
-
SSDEEP
3072:mvis9yKT2qhQkGmgb6/d3JHfI5NxwCshg0eOFmvi:mvJ4KiaQkG7Gv/IzbyeOUK
Static task
static1
Behavioral task
behavioral1
Sample
2014_11rechnung_pdf_telekom_0000283882_november_00288273_11_0000000392_000005.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
2014_11rechnung_pdf_telekom_0000283882_november_00288273_11_0000000392_000005.exe
Resource
win10v2004-20221111-en
Malware Config
Targets
-
-
Target
2014_11rechnung_pdf_telekom_0000283882_november_00288273_11_0000000392_000005.exe
-
Size
148KB
-
MD5
69a462f5962e03c6dc1d34b3ec702ef7
-
SHA1
42a898eb901252f9839b3376e91c80eb508ecf40
-
SHA256
7cad924cac4762e897aa2d5406cf63083e9d44d86f61cdde86946e0419746a2c
-
SHA512
252f8baabb0f160c2886b8d781a55ac747fc443029428929e52d42974eb8bbcc362181b8813c45a91d21dde405859943dd59d148d5f4bb04a5e44e02cca9260f
-
SSDEEP
3072:xQ/LFEPXCmqhQkGmgb6/d33HfI5NxwCshg0e4FeV3q0E:iTePXBaQkG7G5/Izbye4oVq0
Score7/10-
Deletes itself
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-