General

  • Target

    conhost.exe

  • Size

    575KB

  • MD5

    2c2f9d34317a7fc98e6e9678037fc8d8

  • SHA1

    30900cae87e860d480ed98d9142a9b0e7cafc888

  • SHA256

    b3932a0a2ec299c8a287a7f5eccc2913c5be856c7fba20973333084f093e73e2

  • SHA512

    2f4b782038ea6314c427497e4e57115c535663e9e00dfcdc2a03d0cd417e2c6a1a0760c3756a762833ce74f58dbf591a7b15e2252ec0950142038b0e884c9908

  • SSDEEP

    12288:v3O9md/6jkzNzUU/OYbr+sU3THAfnapj7LVFvcrURZMlj34aPR2Y/uHbn:fOcYk5YU/NFU3jSapj75WrUslpJ26u7n

Score
1/10

Malware Config

Signatures

  • NSIS installer 2 IoCs

Files

  • conhost.exe
    .exe windows:4 windows x86 arch:x86

    671f2a1f8aee14d336bab98fea93d734


    Code Sign

    Headers

    Imports

    Sections

  • Indulgentness/Bankettens/Heathery.Sex
  • Padnag71/Unfaithfully/pausesignal/Abildgaardens/harangues.ndh
  • Primatical/Stridulation/Telharmonium/gnallingen.tus
  • Primatical/Stridulation/Telharmonium/haandteringen.wic
  • Sabinas/actualisation/Haandterlig/Besvimelser/sicanian.kha
  • Velkldte.Eft
  • stiles/Skraabjlkerne/haeredes/Appelsinskrl/bilfrgerne.thi
  • stiles/Skraabjlkerne/haeredes/Appelsinskrl/centralafrikansk.txt
  • stiles/Skraabjlkerne/haeredes/Appelsinskrl/folkemindeforskerens.cot