General
- Target file.exe
- Size 509KB
- Sample230604-cgpdwsag22
- SHA256 4d394ab71802f94b89ba5d62bdb2faebc5b500acbc2a362339ba451517710441
- MD5 efdfe7b453335af07c2b47cc91655763
- SHA1 1d43f1f050c68753d2a348d984a6514b84992ed8
- SHA512 f27a1b8b5a5aa7414c984452cf65a1629eb0b6e1348639dfa746bdd1352e2907c7ca55500fd8b0e062562b9f36f7dbdec8ceb51d165de669898fcaad9db823b9
- SSDEEP 12288:fj60x8RcGLqgAAbTrB6nOwYDAm5CaqP9:fjTccuq8bPB6nOXAmMb
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230220-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20230220-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 509KB
- SHA256 4d394ab71802f94b89ba5d62bdb2faebc5b500acbc2a362339ba451517710441
- MD5 efdfe7b453335af07c2b47cc91655763
- SHA1 1d43f1f050c68753d2a348d984a6514b84992ed8
- SHA512 f27a1b8b5a5aa7414c984452cf65a1629eb0b6e1348639dfa746bdd1352e2907c7ca55500fd8b0e062562b9f36f7dbdec8ceb51d165de669898fcaad9db823b9
- SSDEEP 12288:fj60x8RcGLqgAAbTrB6nOwYDAm5CaqP9:fjTccuq8bPB6nOXAmMb
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Deletes itself
-
Accesses Microsoft Outlook profiles