General
-
Target
zz.exe
-
Size
260KB
-
Sample
221128-k6tznsbh84
-
MD5
31319144a917439aa8e961cce95f82ee
-
SHA1
eaea6b758bdba74243099d60e8dd65dcbb524351
-
SHA256
b4455821387f7c5571cf3aa28abde41c188593a4cb5f59d0f1e9c368db49348b
-
SHA512
0d28854203e99f9d35fbbb920a23d9829cfad3a2583d42c77515709963c347282737b7ac545673a3b7951c4e44e4c4c37209780ef9a498eeca1ac81948dccf62
-
SSDEEP
6144:DN92Cag76LSVVz83bwo0SEkRMUEU4zRkaYKGfb:DNQg76LSV4Hf72XU4zRyKGfb
Static task
static1
Behavioral task
behavioral1
Sample
zz.exe
Resource
win7-20220812-en
Malware Config
Extracted
formbook
tu7g
fbbktzFKN8MB1h8=
FPidEXGfkl0WqgXoVhHehw==
iHEjIL7XwJdpN6Er4Evhu03o
fHQTMsjqD3cPpQ==
VDXmCsr22oYhshz/Fg305nF21Q==
j4ZHfk5rRf6tVtwbMRU=
AORqAXKWy4R+//VwFdB6VVk=
9PW0Yw9RkIfer5+/bum7nlxwy1QfDQ==
ZU8mUjRgSOn3d0eFD3puQgVpnaAj
nlHgT2aJaMMB1h8=
+qc6XcgwdjVsEgKQ2zT+
/gCHJbBZrWjx1OZN40Hhu03o
48dX+WeLWAjFZMR2lItP8bJ87X4=
+N6H9VVzix7uogI=
Jf/NAPQe+8we7uftVhHehw==
YmANk8T+ix7uogI=
GTKxpLAYsJTl
pT8FM/QacYAV/+VInxn0
8JAnF9PnyZA29xH3Iw==
8ZdFPhCvGxYBxRCTqtB6VVk=
oEFAb1KQ+MMB1h8=
fCDG5xT7ymUxMvIE68/Fjw==
wLtTVh5ENMPcuBw=
3tmArOWR1oqbdspG4T/hu03o
77lcAEtzQPg805/bfuDMlZ1pnaAj
XSS+arndFfCsVtwbMRU=
2PF3BzB1D5I5vA==
5rxel2MIN540tg==
6/19nF6X36jo54md
K/N9Fsp90Zo99xH3Iw==
S9114R5DIM+4knCf
zn8SD0ap87Ksh1eM
LuusVc4B5KU/9xH3Iw==
7MB5NHSWhCQmqNwbMRU=
JTHI8f+o9skxAugBmgz25nF21Q==
WP20Ytf7D3cPpQ==
Kwy5vbdSu8AuqRfyVhHehw==
ZlodQQ4xAqoyDOlInxn0
+xOeO4CulTQwqNwbMRU=
hzDb1Z7REPRMIixl6Ezhu03o
KNWX0NQJ3Hx4StwbMRU=
Vv4CUhOrD5I5vA==
kmYiSSXFCNGZUtwbMRU=
aYEbzX4rkEEn3tddZVUG5nF21Q==
oHP3D/0cCf9fF/ccthX35nF21Q==
+IdOm4ejdhD4pgjpVhHehw==
5+FzWwgpHvfEf+WHp9B6VVk=
p2sdvuQNWDjM2lVGKxM=
eSW0oY3HpmCfWiweODvvkKFpnaAj
Y0b9I9cGWkNYamWV
jWot0GfQFNOZVtwbMRU=
9vKpJYsplH5CRWPb7t3MdlE=
J/p76BxPnH/79m4JJAvoxkjw
ahbVAAGe4pWqPj+5CquTZFs=
vmIgwy5bTUY0qNwbMRU=
BMFXd61VpqUwsg3B5+vO5nF21Q==
tZtIQUHrOQcOFP4WuTj8
xLRt6VeObi7+wjX+VhHehw==
oWEj0UZyUOtaG/spx0bhu03o
fmH5Ycis19Ly
ZifmGwg5l6GEQNgzTB8=
Khm1W9Z30o4foumH6dB6VVk=
po82VXUebjBVDZ/96hfy
r20yAkFfOe4WpNwbMRU=
eddiyiming.shop
Targets
-
-
Target
zz.exe
-
Size
260KB
-
MD5
31319144a917439aa8e961cce95f82ee
-
SHA1
eaea6b758bdba74243099d60e8dd65dcbb524351
-
SHA256
b4455821387f7c5571cf3aa28abde41c188593a4cb5f59d0f1e9c368db49348b
-
SHA512
0d28854203e99f9d35fbbb920a23d9829cfad3a2583d42c77515709963c347282737b7ac545673a3b7951c4e44e4c4c37209780ef9a498eeca1ac81948dccf62
-
SSDEEP
6144:DN92Cag76LSVVz83bwo0SEkRMUEU4zRkaYKGfb:DNQg76LSV4Hf72XU4zRyKGfb
-
Loads dropped DLL
-
Suspicious use of SetThreadContext
-