General
- Target ae579f1a57697818ade5962f67398437.exe
- Size 491KB
- Sample230531-kceynadg49
- SHA256 ddad7b5c4546bd2bc27d66de61d76e788e48dbcdbafc1a5a4129e61c2dcc3721
- MD5 ae579f1a57697818ade5962f67398437
- SHA1 a128c9b0375101f1a79804a8d433f0bd63ce59d3
- SHA512 539c3d42e347b006b83310b0a6380f34da196954cab901827ff2aa56c18c227b3b30ac47a418e46705ea583cf950d9aeeb28ef769c3a4faee1c504e60797119d
- SSDEEP 12288:9LVT89Mp0J4OcuS5/hvfZ0yLVwnsWCxNYVr2:9LRmJ4AMZ0ICnsWT
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ae579f1a57697818ade5962f67398437.exe
Resource
win7-20230220-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
ae579f1a57697818ade5962f67398437.exe
Resource
win10v2004-20230220-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target ae579f1a57697818ade5962f67398437.exe
- Size 491KB
- SHA256 ddad7b5c4546bd2bc27d66de61d76e788e48dbcdbafc1a5a4129e61c2dcc3721
- MD5 ae579f1a57697818ade5962f67398437
- SHA1 a128c9b0375101f1a79804a8d433f0bd63ce59d3
- SHA512 539c3d42e347b006b83310b0a6380f34da196954cab901827ff2aa56c18c227b3b30ac47a418e46705ea583cf950d9aeeb28ef769c3a4faee1c504e60797119d
- SSDEEP 12288:9LVT89Mp0J4OcuS5/hvfZ0yLVwnsWCxNYVr2:9LRmJ4AMZ0ICnsWT
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Deletes itself
-
Accesses Microsoft Outlook profiles