General
-
Target
WinCE5Emulator.exe
-
Size
3.6MB
-
Sample
240406-md4draga8w
-
MD5
424030556dd67a9b77726cca76379a9c
-
SHA1
27d58b35ea4bac0ab338544b9c8e69bf0d71af85
-
SHA256
f0cac4c20e4a678dd84e66a34bef25238331683be47be3577f1430cd0b93be37
-
SHA512
7d74207f3b685d4f8adc6b32e491d3fcdb76addc09d0c9aa886b49abc1f10476a0fa429cc76059d4fcf2932d2a91d2f38900c06dec554a40fca6cba5dd6a2140
-
SSDEEP
49152:F0/3nQ9QSGMYOPdKLc4NkwguV9OWafGNqjhCBlSuHmE7UxrVr4VDFr/KEHwSfgjk:W/4fGMTPQLco1gufrVqV26hgDFrteSdB
Static task
static1
Behavioral task
behavioral1
Sample
WinCE5Emulator.exe
Resource
win11-20240221-en
Malware Config
Targets
-
-
Target
WinCE5Emulator.exe
-
Size
3.6MB
-
MD5
424030556dd67a9b77726cca76379a9c
-
SHA1
27d58b35ea4bac0ab338544b9c8e69bf0d71af85
-
SHA256
f0cac4c20e4a678dd84e66a34bef25238331683be47be3577f1430cd0b93be37
-
SHA512
7d74207f3b685d4f8adc6b32e491d3fcdb76addc09d0c9aa886b49abc1f10476a0fa429cc76059d4fcf2932d2a91d2f38900c06dec554a40fca6cba5dd6a2140
-
SSDEEP
49152:F0/3nQ9QSGMYOPdKLc4NkwguV9OWafGNqjhCBlSuHmE7UxrVr4VDFr/KEHwSfgjk:W/4fGMTPQLco1gufrVqV26hgDFrteSdB
Score7/10-
Use of msiexec (install) with remote resource
-
Blocklisted process makes network request
-