General
-
Target
3cd5b41cadd8bc515d8cf2764cbf334a011a27d2d9d35ce957811cbb0019815c
-
Size
161KB
-
Sample
221125-jwzazaga7w
-
MD5
3294b06c728db1ffa3dd0869a817c6e8
-
SHA1
e1f6f15421b81ae8e3567ec503dce0fb9ea61cf7
-
SHA256
3cd5b41cadd8bc515d8cf2764cbf334a011a27d2d9d35ce957811cbb0019815c
-
SHA512
8c68fa5fb8887643fd9edaf4cef7e7c47ee5deb2e972ab5cee0e5a0e417e59b86711115e84d64b6ec28d5e7bf7a0f631e8c355754878a256d8ba85ff61f2dcfc
-
SSDEEP
3072:E6KmCaO42WuBdnV/yYTQZo42j5a7BMMNgbnZJSajMdJz6L/3ke/Steg:IlaO42WuBdn0oQZo42jCBMMSbfjMdJIa
Static task
static1
Behavioral task
behavioral1
Sample
3cd5b41cadd8bc515d8cf2764cbf334a011a27d2d9d35ce957811cbb0019815c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
3cd5b41cadd8bc515d8cf2764cbf334a011a27d2d9d35ce957811cbb0019815c.exe
Resource
win10v2004-20221111-en
Malware Config
Targets
-
-
Target
3cd5b41cadd8bc515d8cf2764cbf334a011a27d2d9d35ce957811cbb0019815c
-
Size
161KB
-
MD5
3294b06c728db1ffa3dd0869a817c6e8
-
SHA1
e1f6f15421b81ae8e3567ec503dce0fb9ea61cf7
-
SHA256
3cd5b41cadd8bc515d8cf2764cbf334a011a27d2d9d35ce957811cbb0019815c
-
SHA512
8c68fa5fb8887643fd9edaf4cef7e7c47ee5deb2e972ab5cee0e5a0e417e59b86711115e84d64b6ec28d5e7bf7a0f631e8c355754878a256d8ba85ff61f2dcfc
-
SSDEEP
3072:E6KmCaO42WuBdnV/yYTQZo42j5a7BMMNgbnZJSajMdJz6L/3ke/Steg:IlaO42WuBdn0oQZo42jCBMMSbfjMdJIa
Score8/10-
Executes dropped EXE
-
Registers COM server for autorun
-
Deletes itself
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops desktop.ini file(s)
-
Suspicious use of SetThreadContext
-