General
- Target 5a6cbe35bd3626ab7d186f63740c956e.exe
- Size 434KB
- Sample230531-kc1v5aec2x
- SHA256 1184aeff512cf6da48a3c5357936da4f5488923f2327236be314d704e4cccdea
- MD5 5a6cbe35bd3626ab7d186f63740c956e
- SHA1 ae27730f434a58c113467a99f6f5e9838afea569
- SHA512 50061e706fe712b7cf8437489e6a841d45a499db00f0ee164e2f0d80aadf122a3d179d6d4bc1fdab75d07fef965eac70c10f92d014e0407e50c31e4d1f3a7879
- SSDEEP 6144:+K+aP89n8TcV0+1FXrCioSEIZYYTghEQXZD9FMLz6uMXwlrw0n4+vtV65:NPN21RrU4TexFMLz6uMXSrwA4aA
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
5a6cbe35bd3626ab7d186f63740c956e.exe
Resource
win7-20230220-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
5a6cbe35bd3626ab7d186f63740c956e.exe
Resource
win10v2004-20230220-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 5a6cbe35bd3626ab7d186f63740c956e.exe
- Size 434KB
- SHA256 1184aeff512cf6da48a3c5357936da4f5488923f2327236be314d704e4cccdea
- MD5 5a6cbe35bd3626ab7d186f63740c956e
- SHA1 ae27730f434a58c113467a99f6f5e9838afea569
- SHA512 50061e706fe712b7cf8437489e6a841d45a499db00f0ee164e2f0d80aadf122a3d179d6d4bc1fdab75d07fef965eac70c10f92d014e0407e50c31e4d1f3a7879
- SSDEEP 6144:+K+aP89n8TcV0+1FXrCioSEIZYYTghEQXZD9FMLz6uMXwlrw0n4+vtV65:NPN21RrU4TexFMLz6uMXSrwA4aA
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Deletes itself
-
Accesses Microsoft Outlook profiles