General
-
Target
c920ba3c2065e10dff499d3156dcebc2ec5c1496deec2344200570e648c7e5b8
-
Size
309KB
-
Sample
221125-1p1nwshc68
-
MD5
3649a157bf6c9c18a7449984b21a9a35
-
SHA1
66469e285f66b8cdb4b97dd8a9d2b99529442a9b
-
SHA256
c920ba3c2065e10dff499d3156dcebc2ec5c1496deec2344200570e648c7e5b8
-
SHA512
d883f3a868a788425eba145c9f68ab2e22ccecd35e1edbaddbb94bbf1e630dd523af2d86adb82c14d217136f17bd8894021a4e0923081f7ac5994f8fc241085c
-
SSDEEP
6144:8kKoh/+NWD3hEiyb1WDIBve+OwhT0x02EY:81I/3DWDbcDOGFKY5V
Static task
static1
Behavioral task
behavioral1
Sample
c920ba3c2065e10dff499d3156dcebc2ec5c1496deec2344200570e648c7e5b8.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c920ba3c2065e10dff499d3156dcebc2ec5c1496deec2344200570e648c7e5b8.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
c920ba3c2065e10dff499d3156dcebc2ec5c1496deec2344200570e648c7e5b8
-
Size
309KB
-
MD5
3649a157bf6c9c18a7449984b21a9a35
-
SHA1
66469e285f66b8cdb4b97dd8a9d2b99529442a9b
-
SHA256
c920ba3c2065e10dff499d3156dcebc2ec5c1496deec2344200570e648c7e5b8
-
SHA512
d883f3a868a788425eba145c9f68ab2e22ccecd35e1edbaddbb94bbf1e630dd523af2d86adb82c14d217136f17bd8894021a4e0923081f7ac5994f8fc241085c
-
SSDEEP
6144:8kKoh/+NWD3hEiyb1WDIBve+OwhT0x02EY:81I/3DWDbcDOGFKY5V
Score8/10-
Executes dropped EXE
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-