Overview

overview

7

Static

static

1

tmp.exe

windows7-x64

7

tmp.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    tmp

  • Size

    421KB

  • Sample

    240204-kf98zafgfp

  • MD5

    10a331a12ca40f3293dfadfcecb8d071

  • SHA1

    ada41586d1366cf76c9a652a219a0e0562cc41af

  • SHA256

    b58eec6e5aabc701404d5b5556c86fff5cc103c69eeda00061e838c4f122288f

  • SHA512

    1a5b8e77ddbab97bb4c848adbcd7dbfb9ca84307d1844dba9572fcea48a2cbb091a3fc52663b87568416adf18a1338adc07aab0bd5f1ab36a03c8ff8a035d399

  • SSDEEP

    12288:jh1Fk70TnvjcL8o0S86aZ+ldnqA1W0PeF7H:5k70TrcJX32ih1Re7H

Score
7/10

Malware Config

Targets

    • Target

      tmp

    • Size

      421KB

    • MD5

      10a331a12ca40f3293dfadfcecb8d071

    • SHA1

      ada41586d1366cf76c9a652a219a0e0562cc41af

    • SHA256

      b58eec6e5aabc701404d5b5556c86fff5cc103c69eeda00061e838c4f122288f

    • SHA512

      1a5b8e77ddbab97bb4c848adbcd7dbfb9ca84307d1844dba9572fcea48a2cbb091a3fc52663b87568416adf18a1338adc07aab0bd5f1ab36a03c8ff8a035d399

    • SSDEEP

      12288:jh1Fk70TnvjcL8o0S86aZ+ldnqA1W0PeF7H:5k70TrcJX32ih1Re7H

    Score
    7/10

    • .NET Reactor proctector

      Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks