Overview

overview

10

Static

static

10

RFQ_418332...00.exe

windows7-x64

9

RFQ_418332...00.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4900b43d5fd24f95b56bc3777deeeb6d972f0e7863b988620bfb65bf48a6f2b2.gz

  • Size

    338KB

  • Sample

    240523-bs9zasgf92

  • MD5

    135c25512bb1af6b4ca2c9512e8e748f

  • SHA1

    8b6cfe5f7223515d8a57a038ff68bb0c9cb2f5c8

  • SHA256

    4900b43d5fd24f95b56bc3777deeeb6d972f0e7863b988620bfb65bf48a6f2b2

  • SHA512

    5128660d21ae3e2404fe4014bf10ef3f8eeef6867900c30402a0af4eb87044363f014aae7a8abdd8bc590991386a99fbe7dd9f0574f2a0ffa83e7216c4286801

  • SSDEEP

    3072:HQgbx0G/FnwEtwpC3j0MgcnazriScqZNTvQVFmf6IlOd1A0kyA1wrcyWQut1:HBekBF3aTqfALciMdSWA2cyDut1

Score
10/10

Malware Config

Targets

    • Target

      RFQ_4183321000004562E20000.exe

    • Size

      150.0MB

    • MD5

      379450e55ebb28dfdab7e41b314325c4

    • SHA1

      cdf9ff655925aa8fbd8b8f98285374ae1c122971

    • SHA256

      bf6597b26b2649f2850ba9daa3ee4fbd2d46cbb3ded37cb659137eb5f37893b8

    • SHA512

      dc5bf8483462a638d004240856d65d53b0b79779e6a9b1d05266c06ae1969f422b32a9b73f8daad38ca9ef99226caaa56526c19f708d3edff727e302c47892db

    • SSDEEP

      6144:S2MApbs63Hn2Y594nAqkXJWgPZhZ1L5NGikZF3NjhpH3565Xnnzf0sv4jctw:Zbx4nByJ7PvZ5DwN

    Score
    9/10

    • Detects executables packed with SmartAssembly

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks