General
-
Target
dbe80bbe8073e95976ca36c5f04136e1a2918843adb01e9d7c7f7731d61633ac
-
Size
739KB
-
Sample
221206-eljqbahc95
-
MD5
1bb12439b687e78b4533d9f7bcd46e2c
-
SHA1
809371c39aa8e11cf1a50060f892106c94de0829
-
SHA256
dbe80bbe8073e95976ca36c5f04136e1a2918843adb01e9d7c7f7731d61633ac
-
SHA512
0d62a124ba923275ddc3a36b2fe8092a5a5f8bf029c01a499914c4c697cb6a62e8d4f61dc8c542235de3509899438ef3d83ddcff09668106e4c2702bcd3b4ecd
-
SSDEEP
12288:cQEVq7PKlSwx7IkNtTeUGr++RYxhMiMyrhODTa:cKWQw+mtyWxuihOfa
Static task
static1
Behavioral task
behavioral1
Sample
dbe80bbe8073e95976ca36c5f04136e1a2918843adb01e9d7c7f7731d61633ac.exe
Resource
win10v2004-20221111-en
Malware Config
Extracted
C:\readme.txt
http://obzuqvr5424kkc4unbq2p2i67ny3zngce3tbdr37nicjqesgqcgomfqd.onion/?ST1GHJLMOPR
https://yip.su/2QstD5
Targets
-
-
Target
dbe80bbe8073e95976ca36c5f04136e1a2918843adb01e9d7c7f7731d61633ac
-
Size
739KB
-
MD5
1bb12439b687e78b4533d9f7bcd46e2c
-
SHA1
809371c39aa8e11cf1a50060f892106c94de0829
-
SHA256
dbe80bbe8073e95976ca36c5f04136e1a2918843adb01e9d7c7f7731d61633ac
-
SHA512
0d62a124ba923275ddc3a36b2fe8092a5a5f8bf029c01a499914c4c697cb6a62e8d4f61dc8c542235de3509899438ef3d83ddcff09668106e4c2702bcd3b4ecd
-
SSDEEP
12288:cQEVq7PKlSwx7IkNtTeUGr++RYxhMiMyrhODTa:cKWQw+mtyWxuihOfa
Score10/10-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Suspicious use of SetThreadContext
-