General
-
Target
126245196.exe
-
Size
7.5MB
-
Sample
240220-tpkjcabb6t
-
MD5
3a85aae7df3a8616dcb9695e86479df3
-
SHA1
eb8dea4ac1bb318b8b64c1f8db8ab8faa074a538
-
SHA256
74f936e94136506df018f0b0cb484af9d10d3400109c35581b838cc456cb00db
-
SHA512
7668784a2e2651cfdb35e67ab94f8f39d2e4deb5c4c1d3e71f7ed70b6dfdc6f7fefdb24e08760a57663251f1ef5a8e3593b1e3bdffc3f21fc94e1226efbbad1e
-
SSDEEP
98304:CWumlH6XBJOvJQODguF3DnRHVZK7PjfzFTG1QdpWR9YYTJymVKy+MQGZIi7ipeiI:CN+oGZDRFjPZeTlGlyJFQecRM7HNhS
Static task
static1
Behavioral task
behavioral1
Sample
126245196.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
126245196.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
126245196.exe
-
Size
7.5MB
-
MD5
3a85aae7df3a8616dcb9695e86479df3
-
SHA1
eb8dea4ac1bb318b8b64c1f8db8ab8faa074a538
-
SHA256
74f936e94136506df018f0b0cb484af9d10d3400109c35581b838cc456cb00db
-
SHA512
7668784a2e2651cfdb35e67ab94f8f39d2e4deb5c4c1d3e71f7ed70b6dfdc6f7fefdb24e08760a57663251f1ef5a8e3593b1e3bdffc3f21fc94e1226efbbad1e
-
SSDEEP
98304:CWumlH6XBJOvJQODguF3DnRHVZK7PjfzFTG1QdpWR9YYTJymVKy+MQGZIi7ipeiI:CN+oGZDRFjPZeTlGlyJFQecRM7HNhS
Score7/10-
Obfuscated with Agile.Net obfuscator
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-