Behavioral task
behavioral1
Sample
d7ad4cf42e2f520b0ef1ef910eb9186b.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d7ad4cf42e2f520b0ef1ef910eb9186b.exe
Resource
win10v2004-20240226-en
General
-
Target
d7ad4cf42e2f520b0ef1ef910eb9186b
-
Size
4.0MB
-
MD5
d7ad4cf42e2f520b0ef1ef910eb9186b
-
SHA1
33a097621828dfc287753aa33d954ef755978c3d
-
SHA256
8e09a7c18a858ec70aaa9c69788e8b9e7dffa134cf3bb868c28229e7bf4b9e9e
-
SHA512
8f3e0eaadc5be76e25cd3dd4c8b7ca13b30aa0dbb86b4d4ced212c0f1a4b2ed196c1dbd1a81f9a1f535a0b4d354c3ba0c1bf5e1cc55d11e3026236c0c922912d
-
SSDEEP
49152:HXUIEeZzdeh/c7p1rNdd+JNEj0ykdj21x1YhFlX4bA/Hg/11VzeLG/7wqNKB2VIg:HXrEeZzdhjuV/gd1VzsGUqNKTHvQeeJ
Malware Config
Extracted
bitrat
1.35
185.157.162.100:58181
-
communication_password
d4fab64cc4b3bcd4e84db4020ebb3c66
-
install_dir
Microsoft
-
install_file
micros.exe
-
tor_process
tor
Signatures
Files
-
d7ad4cf42e2f520b0ef1ef910eb9186b.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 147KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE