General
-
Target
RFQ-109800.exe
-
Size
1011KB
-
Sample
230509-jqz1baeh24
-
MD5
0367656cec300726dcd9981200cfaa65
-
SHA1
f8e433043b2ec8e2c3b65361f03d8687a8dc20ee
-
SHA256
0959d0ecb65dd71a370b8d70f8fe2940422cf4757337595bb6ee649d71236bd7
-
SHA512
3255cd3859f7361ea9bcc3d3ff3c4ceeba62221daad7d02c6497b2545a6a9b1532e9d9eaee55f1da888c5e2bc9ac2d04796b3fc7ef6b9b44e6482e0b0d3e28e4
-
SSDEEP
24576:k22dGx5QM+DLmV0SKU+3WBX4ypnZFhz0fxq:zpxGvOV0SzvkY
Static task
static1
Behavioral task
behavioral1
Sample
RFQ-109800.exe
Resource
win7-20230220-en
Malware Config
Extracted
darkcloud
https://api.telegram.org/bot6220925905:AAFbd3Et4YQi4C1WTvNkPbMsAOdz5c8giT0/sendMessage?chat_id=5463149861
Targets
-
-
Target
RFQ-109800.exe
-
Size
1011KB
-
MD5
0367656cec300726dcd9981200cfaa65
-
SHA1
f8e433043b2ec8e2c3b65361f03d8687a8dc20ee
-
SHA256
0959d0ecb65dd71a370b8d70f8fe2940422cf4757337595bb6ee649d71236bd7
-
SHA512
3255cd3859f7361ea9bcc3d3ff3c4ceeba62221daad7d02c6497b2545a6a9b1532e9d9eaee55f1da888c5e2bc9ac2d04796b3fc7ef6b9b44e6482e0b0d3e28e4
-
SSDEEP
24576:k22dGx5QM+DLmV0SKU+3WBX4ypnZFhz0fxq:zpxGvOV0SzvkY
-
Suspicious use of SetThreadContext
-