General
- Target misshas_document_contract_promoutins.scr.exe
- Size 1.5MB
- Sample230214-ml5lsacf76
- SHA256 55886c6ca1f919306f9fb917482d230f8485b394ec997e8c94de7430453ca27f
- MD5 2e9d8fd1ceab10a6db6fff22bffdc105
- SHA1 ae5e69ef5d777809ca93176a9a64fef525db7407
- SHA512 046f7fa6cf9e35ddd4b3855e53f4b9837a88f44d6203ba40a1190efa9d6bf310623cc8f21450fb82c00e650115919672b25d0fb36f97810a33bb8c8ec2670315
- SSDEEP 24576:fnUverXwQUCHazvUGKVmklx9m+ZtUqUOCUbUUZUeUwUNUqUGUpUVUFUYU5UYU/Uu:fUverX
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
misshas_document_contract_promoutins.scr.exe
Resource
win7-20220812-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
misshas_document_contract_promoutins.scr.exe
Resource
win10v2004-20221111-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target misshas_document_contract_promoutins.scr.exe
- Size 1.5MB
- SHA256 55886c6ca1f919306f9fb917482d230f8485b394ec997e8c94de7430453ca27f
- MD5 2e9d8fd1ceab10a6db6fff22bffdc105
- SHA1 ae5e69ef5d777809ca93176a9a64fef525db7407
- SHA512 046f7fa6cf9e35ddd4b3855e53f4b9837a88f44d6203ba40a1190efa9d6bf310623cc8f21450fb82c00e650115919672b25d0fb36f97810a33bb8c8ec2670315
- SSDEEP 24576:fnUverXwQUCHazvUGKVmklx9m+ZtUqUOCUbUUZUeUwUNUqUGUpUVUFUYU5UYU/Uu:fUverX
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Uses the VBS compiler for execution
-
Suspicious use of SetThreadContext