bbdac308d2b15a4724de7919bf8e9ffa713dea60ae3a482417c44c60012a654b[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
bbdac308d2b15a4724de7919bf8e9ffa713dea60ae3a482417c44c60012a654b.exe
Size 720KB
Sample230329-x5hapsbc7s
SHA256 bbdac308d2b15a4724de7919bf8e9ffa713dea60ae3a482417c44c60012a654b
MD5 163e651162f292028ca9a8d7f1ed7340
SHA1 a85ff9091f298ea2d6823a7b0053daa08b237423
SHA512 f1cd02b07219d40d489b8000a92e20fca0c3e536a7dde25b98b7be0ce54a46349dcea9e66bef8f7fbd895ce7e5b22e3f3a46fbb9c7dcea4185b3937384f1649f
SSDEEP 12288:A+2ZzbQ32UC1pC0q1oJn2OR9YA/SnHaetVkiIGjltRztp:A+4OECVCn2OR9r/kaetNIOtZ
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

bbdac308d2b15a4724de7919bf8e9ffa713dea60ae3a482417c44c60012a654b.exe

.exe 720KB

bbdac308d2b15a4724de7919bf8e9ffa713dea60ae3a482417c44c60012a654b.exe

IMPHASH b4d5733390854900e9a765684837c828
SHA256 bbdac308d2b15a4724de7919bf8e9ffa713dea60ae3a482417c44c60012a654b
MD5 163e651162f292028ca9a8d7f1ed7340
SHA1 a85ff9091f298ea2d6823a7b0053daa08b237423
SHA512 f1cd02b07219d40d489b8000a92e20fca0c3e536a7dde25b98b7be0ce54a46349dcea9e66bef8f7fbd895ce7e5b22e3f3a46fbb9c7dcea4185b3937384f1649f
SSDEEP 12288:A+2ZzbQ32UC1pC0q1oJn2OR9YA/SnHaetVkiIGjltRztp:A+4OECVCn2OR9r/kaetNIOtZ
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

391555

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

dbghelp

ImageNtHeader

mpr

WNetOpenEnumW WNetCancelConnection2W WNetAddConnection2W WNetEnumResourceW WNetCloseEnum

wtsapi32

WTSEnumerateSessionsW WTSQueryUserToken WTSFreeMemory

kernel32

SetStdHandle GetStdHandle GetCommandLineW WriteFile GetLastError CreateMutexA GetCurrentProcessId GetCurrentThreadId GetDynamicTimeZoneInformation WideCharToMultiByte GetConsoleMode WriteConsoleA GetConsoleScreenBufferInfo SetConsoleTextAttribute CloseHandle TerminateProcess OpenProcess CreateToolhelp32Snapshot Process32FirstW Process32NextW GetFinalPathNameByHandleW SetFileAttributesW GetCurrentProcess IsValidCodePage GetProcAddress LocalFree GetDriveTypeW GetCurrentThread FormatMessageA ExitThread GetFileSizeEx FlushFileBuffers HeapReAlloc GetTimeZoneInformation EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW CreateThread LoadLibraryExW FreeLibrary GetTimeFormatW GetACP FreeLibraryAndExitThread GetModuleHandleExW GetFileType ReadFile ReadConsoleW GetConsoleOutputCP ExitProcess GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap HeapSize WriteConsoleW GetModuleFileNameW GetCommandLineA HeapAlloc HeapFree GetModuleHandleW MultiByteToWideChar QueryPerformanceCounter WaitForSingleObjectEx GetExitCodeThread GetNativeSystemInfo InitializeSRWLock ReleaseSRWLockExclusive AcquireSRWLockExclusive EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx TryEnterCriticalSection DeleteCriticalSection InitializeConditionVariable WakeConditionVariable WakeAllConditionVariable SleepConditionVariableCS SleepConditionVariableSRW TlsFree GetStringTypeW CreateFileW FindClose FindFirstFileExW FindNextFileW GetFileAttributesW GetFileAttributesExW SetEndOfFile SetFileInformationByHandle SetFilePointerEx AreFileApisANSI GetFileInformationByHandleEx GetSystemTimeAsFileTime EncodePointer DecodePointer CompareStringEx GetCPInfo LCMapStringEx GetLocaleInfoEx InitializeCriticalSectionAndSpinCount SetEvent ResetEvent CreateEventW UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW InitializeSListHead RaiseException RtlUnwind SetLastError TlsAlloc TlsGetValue TlsSetValue GetDateFormatW

shell32

ShellExecuteW

ole32

CoSetProxyBlanket CoCreateInstance CoUninitialize CoInitializeEx

oleaut32

VariantInit SysFreeString SysAllocString

advapi32

LookupPrivilegeValueA CryptGenRandom CryptReleaseContext CryptAcquireContextA RevertToSelf DuplicateTokenEx SetThreadToken SetNamedSecurityInfoW SetEntriesInAclW LookupPrivilegeValueW FreeSid AllocateAndInitializeSid AdjustTokenPrivileges OpenProcessToken OpenServiceW OpenSCManagerW EnumDependentServicesW ControlService CloseServiceHandle