General
-
Target
AKBANK 002'den oluşturulan fatura ödemesiMerkantiliserendes.exe
-
Size
894KB
-
Sample
240215-hnmfrsbh34
-
MD5
10d0b99ee5922390bd2bbe07e71a0a75
-
SHA1
a6e89c9d5007811038fc2d3fd05ed6b01e7fd93a
-
SHA256
05e0f79a1c435ee4d5f914b576b8d9c4a766895aad1da9186ac5a49cc98b3657
-
SHA512
d97f9dfe0ec1c9803fb4f9e74e1ff0892b1068961cf7cd0d8fb1ac3d2b19b3c7d0852a4399b22259518c72b72b8d5d43434b510e904d27ddb9fd38652472828b
-
SSDEEP
24576:GbgG0BHv4m+8zFkv0DLfyfPRBad/XpD7Ao+v:8gL+QFQ6Lf0A17Gv
Static task
static1
Behavioral task
behavioral1
Sample
AKBANK 002'den oluşturulan fatura ödemesiMerkantiliserendes.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
AKBANK 002'den oluşturulan fatura ödemesiMerkantiliserendes.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20231222-en
Malware Config
Targets
-
-
Target
AKBANK 002'den oluşturulan fatura ödemesiMerkantiliserendes.exe
-
Size
894KB
-
MD5
10d0b99ee5922390bd2bbe07e71a0a75
-
SHA1
a6e89c9d5007811038fc2d3fd05ed6b01e7fd93a
-
SHA256
05e0f79a1c435ee4d5f914b576b8d9c4a766895aad1da9186ac5a49cc98b3657
-
SHA512
d97f9dfe0ec1c9803fb4f9e74e1ff0892b1068961cf7cd0d8fb1ac3d2b19b3c7d0852a4399b22259518c72b72b8d5d43434b510e904d27ddb9fd38652472828b
-
SSDEEP
24576:GbgG0BHv4m+8zFkv0DLfyfPRBad/XpD7Ao+v:8gL+QFQ6Lf0A17Gv
Score10/10-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory
-
Suspicious use of NtCreateThreadExHideFromDebugger
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext
-
-
-
Target
$PLUGINSDIR/System.dll
-
Size
12KB
-
MD5
cff85c549d536f651d4fb8387f1976f2
-
SHA1
d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e
-
SHA256
8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8
-
SHA512
531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88
-
SSDEEP
192:Zjvco0qWTlt70m5Aj/lQ0sEWD/wtYbBHFNaDybC7y+XBz0QPi:FHQlt70mij/lQRv/9VMjzr
Score3/10 -