General
- Target 09208699.exe
- Size 491KB
- Sample230528-wla7lsga72
- SHA256 2aaae232c889912fe61abafb3dd36bfa3499d21daaf61d8c839ed53c50ffa388
- MD5 076e8cfedfa31e546087a943e5e7c681
- SHA1 19df36322342a4084ecf28606ad9372eb348fd3c
- SHA512 0f5736f86b2fdf0c0a3ea9dbbd49c7883811a8675a67b6358b25bae9011931a94ad3a92ef89e1787ad50b91c95084a982758fc218371244153c0e0416208e6bf
- SSDEEP 6144:AeoWC4NAyTwOZiaOjhl/xMTU4uaa1XcqhcmK2AD/5/klaT8F6:LoWH9TwOZiLjl9DKL/kg
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
09208699.exe
Resource
win7-20230220-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
09208699.exe
Resource
win10v2004-20230220-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 09208699.exe
- Size 491KB
- SHA256 2aaae232c889912fe61abafb3dd36bfa3499d21daaf61d8c839ed53c50ffa388
- MD5 076e8cfedfa31e546087a943e5e7c681
- SHA1 19df36322342a4084ecf28606ad9372eb348fd3c
- SHA512 0f5736f86b2fdf0c0a3ea9dbbd49c7883811a8675a67b6358b25bae9011931a94ad3a92ef89e1787ad50b91c95084a982758fc218371244153c0e0416208e6bf
- SSDEEP 6144:AeoWC4NAyTwOZiaOjhl/xMTU4uaa1XcqhcmK2AD/5/klaT8F6:LoWH9TwOZiLjl9DKL/kg
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Deletes itself
-
Accesses Microsoft Outlook profiles