General
-
Target
FA AntiVira Prosses Watch.exe
-
Size
7.1MB
-
Sample
240528-s2944abf95
-
MD5
b2ac66b218e7ae7060cdec60d00e2a43
-
SHA1
bbfef4a64dbaf30b338ac07077779419fff84a0a
-
SHA256
b85a14808fd2c4da402f9dce27315defeb528c48874aba50b1f3de63556675e3
-
SHA512
0b1da4b4b2078ba690e1bc936728458a23e0544706d2d3fd92009acd140dd5e3e3eafff16dd4ac74879557a80a376890b8462e299ab544d6a4bb9bfd2980e605
-
SSDEEP
196608:WsxWA1HeT39IigheE9TFa0Z8DOjCdylNownzbQWa0ngx:Z1+TtIibY9Z8D8CclyUnwigx
Malware Config
Targets
-
-
Target
FA AntiVira Prosses Watch.exe
-
Size
7.1MB
-
MD5
b2ac66b218e7ae7060cdec60d00e2a43
-
SHA1
bbfef4a64dbaf30b338ac07077779419fff84a0a
-
SHA256
b85a14808fd2c4da402f9dce27315defeb528c48874aba50b1f3de63556675e3
-
SHA512
0b1da4b4b2078ba690e1bc936728458a23e0544706d2d3fd92009acd140dd5e3e3eafff16dd4ac74879557a80a376890b8462e299ab544d6a4bb9bfd2980e605
-
SSDEEP
196608:WsxWA1HeT39IigheE9TFa0Z8DOjCdylNownzbQWa0ngx:Z1+TtIibY9Z8D8CclyUnwigx
-
Loads dropped DLL
-
Legitimate hosting services abused for malware hosting/C2
-