General
- Target c475b82f1e0b421e051622f034b1d5e3.dll
- Size 5.0MB
- Sample221223-nfzzsagd49
- SHA256 ba8179c3448afe4420ed0afa4eee05e8955ae8d1e10bfd5a4d3de1e12f19763d
- MD5 c475b82f1e0b421e051622f034b1d5e3
- SHA1 e1cfa940659f8dcf46098f67ec3de711e7123cb5
- SHA512 bbc36d925fb888af9224c1414ac2c9a9d2f6b3cdbc356983d4483a5dab3ec891481de74c55b681214d0468802b3cf49f4c9d050438bec6ad850577d167a30494
- SSDEEP 98304:TDqPoBhz1aRxcSUDk36SAEdhvxWa9P593RkAVp2H:TDqPe1Cxcxk3ZAEUadzRkc4H
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
c475b82f1e0b421e051622f034b1d5e3.dll
Resource
win7-20221111-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
c475b82f1e0b421e051622f034b1d5e3.dll
Resource
win10v2004-20221111-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target c475b82f1e0b421e051622f034b1d5e3.dll
- Size 5.0MB
- SHA256 ba8179c3448afe4420ed0afa4eee05e8955ae8d1e10bfd5a4d3de1e12f19763d
- MD5 c475b82f1e0b421e051622f034b1d5e3
- SHA1 e1cfa940659f8dcf46098f67ec3de711e7123cb5
- SHA512 bbc36d925fb888af9224c1414ac2c9a9d2f6b3cdbc356983d4483a5dab3ec891481de74c55b681214d0468802b3cf49f4c9d050438bec6ad850577d167a30494
- SSDEEP 98304:TDqPoBhz1aRxcSUDk36SAEdhvxWa9P593RkAVp2H:TDqPe1Cxcxk3ZAEUadzRkc4H
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Executes dropped EXE
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Drops file in System32 directory