General
- Target PO NMZXCV.exe
- Size 781KB
- Sample240124-rcp7yscbbp
- SHA256 e24f2f385bbbb4c09d165929599a3a802da74c2071a40b2d192313e21c0de4da
- MD5 a5848307ef25240179f2996121ab7732
- SHA1 086e2e2a8255f47ab61431c3857c78dd6c3e041d
- SHA512 1cc3530339091af5e02cca3eedce2934e68c8beb168da45bc1d44fcab55ae6698bc0be2173f7c9b6a9958c6795ad1b75c640b287ba260210ac97cdfaccf9993e
- SSDEEP 12288:eLKTEq+d05GjkW4sA4B3h3X7oziCua19gTfhrSMsOVJqj:exq+djkW4sA4BRn7ozbuSKJrSIqj
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
PO NMZXCV.exe
Resource
win7-20231215-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
PO NMZXCV.exe
Resource
win10v2004-20231215-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target PO NMZXCV.exe
- Size 781KB
- SHA256 e24f2f385bbbb4c09d165929599a3a802da74c2071a40b2d192313e21c0de4da
- MD5 a5848307ef25240179f2996121ab7732
- SHA1 086e2e2a8255f47ab61431c3857c78dd6c3e041d
- SHA512 1cc3530339091af5e02cca3eedce2934e68c8beb168da45bc1d44fcab55ae6698bc0be2173f7c9b6a9958c6795ad1b75c640b287ba260210ac97cdfaccf9993e
- SSDEEP 12288:eLKTEq+d05GjkW4sA4B3h3X7oziCua19gTfhrSMsOVJqj:exq+djkW4sA4BRn7ozbuSKJrSIqj
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Modifies file permissions
-
Suspicious use of SetThreadContext