General
- Target file.exe
- Size 447KB
- Sample230615-ypsxyaba64
- SHA256 0ca15ac24cd26ecd4afb42b4c8802bcfc1eb06088ae0d3503fbc732f80429531
- MD5 75a34d3bc5d01c45db6e3116c7d1fc80
- SHA1 e42a9f9f74db70f8a2895c8b39e2d358ccb62482
- SHA512 d899c07742e4fa13ab2c8bb1d020078738c221f183d21e0b77e62ffc63eb7592d2b169596c87ab660a2ba8e8145e25166d9654c36e8205ef422408b6e7b7a0ae
- SSDEEP 12288:lLevbifhWuhXqzWUcY3SwAbbFiEjOryPKCtjs:lQot6zWUHSL5iEjiyCCe
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230220-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20230220-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 447KB
- SHA256 0ca15ac24cd26ecd4afb42b4c8802bcfc1eb06088ae0d3503fbc732f80429531
- MD5 75a34d3bc5d01c45db6e3116c7d1fc80
- SHA1 e42a9f9f74db70f8a2895c8b39e2d358ccb62482
- SHA512 d899c07742e4fa13ab2c8bb1d020078738c221f183d21e0b77e62ffc63eb7592d2b169596c87ab660a2ba8e8145e25166d9654c36e8205ef422408b6e7b7a0ae
- SSDEEP 12288:lLevbifhWuhXqzWUcY3SwAbbFiEjOryPKCtjs:lQot6zWUHSL5iEjiyCCe
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Deletes itself
-
Accesses Microsoft Outlook profiles