General
-
Target
SecuriteInfo.com.Win32.PWSX-gen.12756.6270.exe
-
Size
822KB
-
Sample
221205-lnr8ssga22
-
MD5
e83b0a8fc194633141c951a6861423e4
-
SHA1
b6ce6d60ff9e63dad304a67eed4a1e3e84271533
-
SHA256
893f2dfd5758eb6fd8a7c8d9a6e83bc28ef165be2ef52c9a3ef4124f25dcd661
-
SHA512
84ad26f5efafd38936e0a3c540aaad054215778ebf5d114d03710f1eed3c31ca291e5a307c7ff03fc629947b032b973243c2ad556059b66c119e8676e9a08aea
-
SSDEEP
12288:BsMcidkg586aWHffM5U/VBzEr2aXDbPmYX/uTSu1VWPbdJ4P9A8TXIFVB:KMZdB5O8fEU/VBXYDLmYWTSoeJuCr
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Win32.PWSX-gen.12756.6270.exe
Resource
win7-20220901-en
Malware Config
Extracted
formbook
w086
F6jSz+l9QmYXguG/xUipf/6ixrik
cQZre8twfBVOOJgLenGTGA==
pG5kW2/wqwEOCVxZ
KORXeYwt7wF8J3BR
HL0ZdBMjeHet
TR57b4Yi6wJ8J3BR
fRyK2yaqeDRGHiQTTw==
RwhsqfRxABNZS59wenGTGA==
GuZaY4H4ahcWKjUdVg==
I5C4/Wyz3fglj+o=
Te5QPEu3NjZ0P58LenGTGA==
M9YJLwifZIi9pfnj2Nj/kA6+ZlU=
c/JFdRndG8f/HiQTTw==
nMmcD1UjeHet
QWR7+9Rh8/l8J3BR
9MD+BzOyI6mXtM4w6LMyEA==
WABgaYPqdJzl2TviGbdH
02OexRebqj3+U2kXhQ0=
j17M2R3/fQwFHiQTTw==
dQpReYss5/l8J3BR
tiaHq71bHDzrXWkXhQ0=
pks7Z4EmPunm2e0ZDK5F
EKYCS50qID/AL4HlVNUIg0XJdFQ=
iCibxeJa5ARNSauNiDOMmBT/
yZHHww7dJM8EHiQTTw==
HbLe2y3prvglj+o=
dVJttQWbovglj+o=
PNU9jC3aosZHn/dewVKhOvPC8tWu
flK4vRfTDsWS7U/JQQoNoDI=
SG097d7jZ8zPlv0=
jildmuNaT3ndPI4LenGTGA==
M8cbIW9BjgwJHiQTTw==
nz6k8Ydf0cxaq/c=
tnrjNokIeQz39UHiGbdH
GJD0UP/vY3uw
yE6h6o1UGTvtXWkXhQ0=
LtxFZHfxbgn95SwTWAE2Sml55w==
rJ2BASXOQZ/Hnw==
7IXl+gV8iRTfWq7mqBU=
fRpdr0gmrlN8J3BR
Pe1BOFsjeHet
VhhdBl9AL2ez
agpovx6sPPHsyhwQDvlqRWRq4A==
2HDY8QKAKT24N46HenGTGA==
KdZAoDfxvDAtDWtZ
6sJYfcmQ43FZM4Z1q3PJcaiOi0CeDw==
khBpyO0KjDxJHiQTTw==
GPZiV8d80sX++1k7R9cn58qr6A==
+sdAldR8R5jdtM4w6LMyEA==
kjRknj/6LMB070Q9NlSVDw==
7oz0SZRADjdrUaqax7S2ozCm8k+qEg==
u4LngJ/1QZ/Hnw==
rSJUnvl4giPmirwliAM7vzo=
0kSk9EsjeHet
zl6gy9h22Hx+b9TVwlbTnM6YviaYRp/FYg==
/qn8dVEjeHet
BpH1R+W9RkuBYriychlArMmp6g==
HOdOcL1wtVIbfN5E8woNoDI=
41rBwtJN2Nt4/V3DNgoNoDI=
5HGl16E9+wV8J3BR
IMUfc0PAT1eIa8e1ojuMmBT/
JM4jYwHVU/0C3y8ZDvlqRWRq4A==
1WfCyxTOQZ/Hnw==
gRRmp/tz4nFcN4BwenGTGA==
re-curve.tech
Targets
-
-
Target
SecuriteInfo.com.Win32.PWSX-gen.12756.6270.exe
-
Size
822KB
-
MD5
e83b0a8fc194633141c951a6861423e4
-
SHA1
b6ce6d60ff9e63dad304a67eed4a1e3e84271533
-
SHA256
893f2dfd5758eb6fd8a7c8d9a6e83bc28ef165be2ef52c9a3ef4124f25dcd661
-
SHA512
84ad26f5efafd38936e0a3c540aaad054215778ebf5d114d03710f1eed3c31ca291e5a307c7ff03fc629947b032b973243c2ad556059b66c119e8676e9a08aea
-
SSDEEP
12288:BsMcidkg586aWHffM5U/VBzEr2aXDbPmYX/uTSu1VWPbdJ4P9A8TXIFVB:KMZdB5O8fEU/VBXYDLmYWTSoeJuCr
-
Suspicious use of SetThreadContext
-