General
- Target file.exe
- Size 421KB
- Sample230615-lr7gwsff9z
- SHA256 59d09c8a52afad517845498cb8bcef3055f28f3b3d6e673b856f4b488f73149c
- MD5 a1976c84768280d33c1f6ca25541830d
- SHA1 2fb83be9ae9c08cba506b7548b917bd01be88993
- SHA512 318c789cb24e5451b92e34bb983e9999148faea7e44f5338a45e813fbb9ea75817b0f5d02c1778df0e25d3b1d113e589a5571ea6b982ecaaf9ea88398894e76a
- SSDEEP 6144:1epuKuBPPVRmyWkRdlpufzoE+hiPV/W5AUrjXlK3usEOxIRQBF7a/mJVoH:1quKuPgyd5uf5PtIAkj8Q8BF+5
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230220-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20230220-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 421KB
- SHA256 59d09c8a52afad517845498cb8bcef3055f28f3b3d6e673b856f4b488f73149c
- MD5 a1976c84768280d33c1f6ca25541830d
- SHA1 2fb83be9ae9c08cba506b7548b917bd01be88993
- SHA512 318c789cb24e5451b92e34bb983e9999148faea7e44f5338a45e813fbb9ea75817b0f5d02c1778df0e25d3b1d113e589a5571ea6b982ecaaf9ea88398894e76a
- SSDEEP 6144:1epuKuBPPVRmyWkRdlpufzoE+hiPV/W5AUrjXlK3usEOxIRQBF7a/mJVoH:1quKuPgyd5uf5PtIAkj8Q8BF+5
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Deletes itself
-
Accesses Microsoft Outlook profiles