General
- Target NGL 3200-Phase 2- Strainer.exe
- Size 740KB
- Sample240624-nc5e4aygra
- SHA256 07c90d353d736c2a8015e7f1e86d4492d697360132914e1379cff9f0e0385ccc
- MD5 2500b043b3066dd6c99188f8aa499a43
- SHA1 1b92a7d3ad299bceeb90c2b2e0a44c7deaacfab3
- SHA512 f07000e06be83e48918f606a34b68f558df47c56aa0458c3ff5ef60612cdc5899c88528f720ec339f077160950765fe7790430055fa63ae55cb2e5ce21aaba9f
- SSDEEP 12288:a3YiVcAg97uC0M2gFPDUR3pVW4TKGCntdh5CE2u3lGI9ASjLo3cbUN4uDBuODlbx:a3YiVIZuQ2gRC3pDTREzhYE2ylGwwVfl
- MD5 SHA1 SHA512 SSDEEP
Score
5/10
Static task
static1
Behavioral task
behavioral1
Sample
NGL 3200-Phase 2- Strainer.exe
Resource
win7-20231129-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
NGL 3200-Phase 2- Strainer.exe
Resource
win10v2004-20240508-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target NGL 3200-Phase 2- Strainer.exe
- Size 740KB
- SHA256 07c90d353d736c2a8015e7f1e86d4492d697360132914e1379cff9f0e0385ccc
- MD5 2500b043b3066dd6c99188f8aa499a43
- SHA1 1b92a7d3ad299bceeb90c2b2e0a44c7deaacfab3
- SHA512 f07000e06be83e48918f606a34b68f558df47c56aa0458c3ff5ef60612cdc5899c88528f720ec339f077160950765fe7790430055fa63ae55cb2e5ce21aaba9f
- SSDEEP 12288:a3YiVcAg97uC0M2gFPDUR3pVW4TKGCntdh5CE2u3lGI9ASjLo3cbUN4uDBuODlbx:a3YiVIZuQ2gRC3pDTREzhYE2ylGwwVfl
- MD5 SHA1 SHA512 SSDEEP
Score5/10-
Suspicious use of SetThreadContext