General
- Target c2efc3276a3f8d3963e26602a2218d19.exe
- Size 418KB
- Sample230531-kcfvysdg56
- SHA256 a5fbff72a3aa6120ee4b47120171d9886f0428e36359efcc2b257308a2c78d07
- MD5 c2efc3276a3f8d3963e26602a2218d19
- SHA1 a9a312008b2d662800cf7582e0e9d7887d11071c
- SHA512 17bb794e3fb9b2816b25399ab9049e46f13d121f14b9955282196d210900300dff3a772b1d948c6f6a97c99f9e818481db24a502275275b052a5deead8d848cc
- SSDEEP 12288:ps1LmabvQXBNEG+xT9vZ0anesDwjr1kZXW43i4/q:ps1yab2BeyIzDwjX4/
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
c2efc3276a3f8d3963e26602a2218d19.exe
Resource
win7-20230220-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
c2efc3276a3f8d3963e26602a2218d19.exe
Resource
win10v2004-20230220-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target c2efc3276a3f8d3963e26602a2218d19.exe
- Size 418KB
- SHA256 a5fbff72a3aa6120ee4b47120171d9886f0428e36359efcc2b257308a2c78d07
- MD5 c2efc3276a3f8d3963e26602a2218d19
- SHA1 a9a312008b2d662800cf7582e0e9d7887d11071c
- SHA512 17bb794e3fb9b2816b25399ab9049e46f13d121f14b9955282196d210900300dff3a772b1d948c6f6a97c99f9e818481db24a502275275b052a5deead8d848cc
- SSDEEP 12288:ps1LmabvQXBNEG+xT9vZ0anesDwjr1kZXW43i4/q:ps1yab2BeyIzDwjX4/
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Deletes itself
-
Accesses Microsoft Outlook profiles