General
- Target 06b767af9bd27fd82ead08a29f6d2b4b8c53c575fdb9ec6c7cb67bf3a602b1ce
- Size 126KB
- Sample221127-xavmjsab55
- SHA256 06b767af9bd27fd82ead08a29f6d2b4b8c53c575fdb9ec6c7cb67bf3a602b1ce
- MD5 aac0bbcdd93cdf7217f0b16f6902b643
- SHA1 85d03778f4c65a7dc7dd29990165ffc87484635e
- SHA512 9ca59ff7fed6844a153c517911dfea9424bf07184e9bd6e8b22af0c973fe1398f85c5443f2002e6c726e7abee3d6bb8bebadebaf73ad42a937373b12ce6faec6
- SSDEEP 3072:ARvQ2PK/C01cY3XO29Y5eCPN2bViTpRJP12EFs+NLY+wRNgsW95Lk:z2C/HO1CY5e+CVijyEXlY+su9xk
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
2014_11_rechnung_1_1_000309399002_4884_9849_00483_00222_0039459856_29392_000000002008.exe
Resource
win7-20221111-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2014_11_rechnung_1_1_000309399002_4884_9849_00483_00222_0039459856_29392_000000002008.exe
Resource
win10v2004-20221111-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2014_11_rechnung_1_1_000309399002_4884_9849_00483_00222_0039459856_29392_000000002008.exe
- Size 168KB
- SHA256 6452bb100340136bacfe46a6c14d211f409144fe0919768fde8feb52536583a5
- MD5 03bbe5696e292a27becc2197f1024a16
- SHA1 59802f9b918bed69eaf113f1ab24698bd46392d0
- SHA512 36b8b3f166e87aa9c34401159dc16d0f757d1750a66bfe580e754677c59666c000a8c92484dec025ab8ec379096e24271435f25fb9e507a36d31bfc70f1bd270
- SSDEEP 3072:2dLyZlwEyKcoO29Y5eCPN2bViTphJP12EFs+NLVgu2TVAOWX:oLaw7F3CY5e+CVi/yEXlVh2hk
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Deletes itself
-
Adds Run key to start application
-
Suspicious use of SetThreadContext