General
- Target rpayment.exe
- Size 410KB
- Sample230228-qwth2sbf22
- SHA256 1bbffa3f8bd9d8adeb17700d77f607e48fbf88375a8ea5c8f119c63933204fc7
- MD5 bc6228b589ff7c76685003933f0e9693
- SHA1 3a1ca66c347c78ac1d5b6f7ec98c37ab4561392b
- SHA512 48f236c3d5ce24223f572250c8b26139e40ef79b0cb7bb23540e2add7e9fc4a810934a677b2535c719773e91346e412ebb3e13623f578ee9a20adc7d87ecd3d8
- SSDEEP 12288:HiopATnYCAwgxbxcIZNQuzUDukt0UGSzWG+:HioqnYCAw0iI1UOu4
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
rpayment.exe
Resource
win7-20230220-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
rpayment.exe
Resource
win10v2004-20230220-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target rpayment.exe
- Size 410KB
- SHA256 1bbffa3f8bd9d8adeb17700d77f607e48fbf88375a8ea5c8f119c63933204fc7
- MD5 bc6228b589ff7c76685003933f0e9693
- SHA1 3a1ca66c347c78ac1d5b6f7ec98c37ab4561392b
- SHA512 48f236c3d5ce24223f572250c8b26139e40ef79b0cb7bb23540e2add7e9fc4a810934a677b2535c719773e91346e412ebb3e13623f578ee9a20adc7d87ecd3d8
- SSDEEP 12288:HiopATnYCAwgxbxcIZNQuzUDukt0UGSzWG+:HioqnYCAw0iI1UOu4
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.