General
-
Target
auth.exe
-
Size
10.3MB
-
Sample
231022-vp9znsdc74
-
MD5
7474c679b012237a1f4a47fe486b848d
-
SHA1
0bf8bb660858b807039eea1eabd7d385e4d354c7
-
SHA256
5c26158f9f4bb51cbd7c96333bf4439aeb510ca22e351f97e64f7f049cf3d3ed
-
SHA512
4bc3bf184f99f653faa551459e023142852b6a911630860dc16d9778db519b497c4de8a09cada7702ba6ce002b285d44e6254f9bc96fb8d79ea5243a39da2635
-
SSDEEP
196608:FumE8dv9lKFBkF1X1dc78AYMo5E1KdEv6bow0J9nF/gduAnabSDK3m:EbY9kQXX1GzrME1KdgeowuSm
Static task
static1
Behavioral task
behavioral1
Sample
auth.exe
Resource
win10-20231020-en
Behavioral task
behavioral2
Sample
auth.exe
Resource
win10v2004-20231020-en
Malware Config
Targets
-
-
Target
auth.exe
-
Size
10.3MB
-
MD5
7474c679b012237a1f4a47fe486b848d
-
SHA1
0bf8bb660858b807039eea1eabd7d385e4d354c7
-
SHA256
5c26158f9f4bb51cbd7c96333bf4439aeb510ca22e351f97e64f7f049cf3d3ed
-
SHA512
4bc3bf184f99f653faa551459e023142852b6a911630860dc16d9778db519b497c4de8a09cada7702ba6ce002b285d44e6254f9bc96fb8d79ea5243a39da2635
-
SSDEEP
196608:FumE8dv9lKFBkF1X1dc78AYMo5E1KdEv6bow0J9nF/gduAnabSDK3m:EbY9kQXX1GzrME1KdgeowuSm
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-