General
-
Target
e9633fa43e97dd36ae7d4fdb84985aa5b3eb6e395381f33284bd6bab4ad2b98b
-
Size
217KB
-
Sample
221125-hm18jahc58
-
MD5
4118211a4ac4103ea7351a0500a1a883
-
SHA1
820f3cd722b29adc81dcb95610c96961fc04acc2
-
SHA256
e9633fa43e97dd36ae7d4fdb84985aa5b3eb6e395381f33284bd6bab4ad2b98b
-
SHA512
8d5dfd08e9b0ab1e8a90eb8f9a67e21ca23d121061e9b1e0c16f2ac3c69a2f3374cacf0d200b1f9302c5cbfb83587a2eb17037771ee3effed9fc33c5a64ae1d1
-
SSDEEP
3072:F+AZfjOlbwZNBFx7yMvXj31IK3a6LUpPTIupkHKWDZf+/vhP7fd:F+WfjrFTvhIK3ahTIVqBF
Static task
static1
Behavioral task
behavioral1
Sample
e9633fa43e97dd36ae7d4fdb84985aa5b3eb6e395381f33284bd6bab4ad2b98b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e9633fa43e97dd36ae7d4fdb84985aa5b3eb6e395381f33284bd6bab4ad2b98b.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
e9633fa43e97dd36ae7d4fdb84985aa5b3eb6e395381f33284bd6bab4ad2b98b
-
Size
217KB
-
MD5
4118211a4ac4103ea7351a0500a1a883
-
SHA1
820f3cd722b29adc81dcb95610c96961fc04acc2
-
SHA256
e9633fa43e97dd36ae7d4fdb84985aa5b3eb6e395381f33284bd6bab4ad2b98b
-
SHA512
8d5dfd08e9b0ab1e8a90eb8f9a67e21ca23d121061e9b1e0c16f2ac3c69a2f3374cacf0d200b1f9302c5cbfb83587a2eb17037771ee3effed9fc33c5a64ae1d1
-
SSDEEP
3072:F+AZfjOlbwZNBFx7yMvXj31IK3a6LUpPTIupkHKWDZf+/vhP7fd:F+WfjrFTvhIK3ahTIVqBF
Score9/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Suspicious use of SetThreadContext
-