General
-
Target
aa2d97b5be06be67ec04774ad681da6113ee2b4929c0539929bbac19926682c8
-
Size
52KB
-
Sample
240410-qk2ehsha83
-
MD5
d8e1495b46cded57eb1423b8bb789834
-
SHA1
db64bc20550e51c602dbb92d07c8f02842efebcc
-
SHA256
aa2d97b5be06be67ec04774ad681da6113ee2b4929c0539929bbac19926682c8
-
SHA512
8b785d7f8d5fdf12dd9a5414050d403e861fd3f9ac09bceebc57b2f178c6f145389783ed1035b5e6f9b627b3d4d978f3ad9bf8195d92e20f585ef92667e4cabb
-
SSDEEP
768:kbx1xSQBLHSq0ItD/hf3aLFLPnWQUQ7x6ziT:kb5SyHRJD/hf3aLlKcxeiT
Static task
static1
Behavioral task
behavioral1
Sample
aa2d97b5be06be67ec04774ad681da6113ee2b4929c0539929bbac19926682c8.exe
Resource
win7-20240221-en
Malware Config
Extracted
colibri
1.2.0
Build1
http://zpltcmgodhvvedxtfcygvbgjkvgvcguygytfigj.cc/gate.php
http://yugyuvyugguitgyuigtfyutdtoghghbbgyv.cx/gate.php
Targets
-
-
Target
aa2d97b5be06be67ec04774ad681da6113ee2b4929c0539929bbac19926682c8
-
Size
52KB
-
MD5
d8e1495b46cded57eb1423b8bb789834
-
SHA1
db64bc20550e51c602dbb92d07c8f02842efebcc
-
SHA256
aa2d97b5be06be67ec04774ad681da6113ee2b4929c0539929bbac19926682c8
-
SHA512
8b785d7f8d5fdf12dd9a5414050d403e861fd3f9ac09bceebc57b2f178c6f145389783ed1035b5e6f9b627b3d4d978f3ad9bf8195d92e20f585ef92667e4cabb
-
SSDEEP
768:kbx1xSQBLHSq0ItD/hf3aLFLPnWQUQ7x6ziT:kb5SyHRJD/hf3aLlKcxeiT
-
Suspicious use of SetThreadContext
-