General
-
Target
tmp
-
Size
99KB
-
Sample
230530-ds2n2aeh79
-
MD5
6208c83f58b432ccf579c828f0a8e336
-
SHA1
0ebb82b9abf8426dc1627e8043a712dd3aa40e54
-
SHA256
bb0f3f532cb2254c3e4fb6a84ed3573d8586531a7ff9659fb92288e18f5b1fe3
-
SHA512
a8001330b18ea98e6a3955ba5b49592549a96d240c1580816085e9295b0712a68a53afcf7921c724f18a9b9e1bf40659a10485ab1141007172a3ca17b9b58c10
-
SSDEEP
1536:jhMa8yEH/PZwoo5psi8SIWe94eg1Wcb1kj+x/JmNApp8CVFoFucbpYBGqfw:jV8rf+ooTsV8eBM6S9JYUp8CVjJMqo
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20230220-en
Malware Config
Targets
-
-
Target
tmp
-
Size
99KB
-
MD5
6208c83f58b432ccf579c828f0a8e336
-
SHA1
0ebb82b9abf8426dc1627e8043a712dd3aa40e54
-
SHA256
bb0f3f532cb2254c3e4fb6a84ed3573d8586531a7ff9659fb92288e18f5b1fe3
-
SHA512
a8001330b18ea98e6a3955ba5b49592549a96d240c1580816085e9295b0712a68a53afcf7921c724f18a9b9e1bf40659a10485ab1141007172a3ca17b9b58c10
-
SSDEEP
1536:jhMa8yEH/PZwoo5psi8SIWe94eg1Wcb1kj+x/JmNApp8CVFoFucbpYBGqfw:jV8rf+ooTsV8eBM6S9JYUp8CVjJMqo
-
Detect Blackmoon payload
-
Deletes itself
-
Suspicious use of SetThreadContext
-