Extracted

• • Target

    BlackHatWorm.exe

  • Size

    1.1MB

  • MD5

    ff2d2c4638eabb42aea87ae084f65a6c

  • SHA1

    7599c0c6ac507470ec8c85e9efa9f7bada802feb

  • SHA256

    65c71566954fa20c2806222a6fdfaf4129f16954a89d9e50821aa2d27c41d89f

  • SHA512

    b7864facd647afcbd436a80b3b60dc6b47137e96daa4d087fb0ec0ffc8e36e2c0305424f37cb5a2b3960cb38310b9403f79af83e68dadddb4f591a1389ed2ada

  • SSDEEP

    6144:PbnV479d+YiP3Y3QvevhEtHvSFCW9fQNmn6lCPDA2h:Z4/+YiP3Y3QveuHvSFC5lC7A4

  Score

  8^/10

  discoveryexecution

  • Blocklisted process makes network request

  • Command and Scripting Interpreter: PowerShell

    Run Powershell and hide display window.

    execution

  • Command and Scripting Interpreter: PowerShell

    Powershell Invoke Web Request.

    execution

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2