General
- Target PO02502050025 - Agroizbira.exe
- Size 1.2MB
- Sample250206-jmlcrayjds
- SHA256 40644b368c1e04cbb944236729d0ecb6f7d5b0f102a14c2ec83e72da6a8e9732
- MD5 07d388ba8f697f42083f7b367c7f11e4
- SHA1 042bde5bf5d5f4926b8e59e949c69fec8164597b
- SHA512 27e810a9a054458015467b84a9c963081651764cd322eab122e55644eff795503086fb0e7308051920546b4875996ba611e45589c67257d6516b096ae4ab5d0f
- SSDEEP 24576:5AHnh+eWsN3skA4RV1Hom2KXFmIaammo5dOb+i+09Utu3oHU5:Ah+ZkldoPK1Xaamy6V8Uk
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
PO02502050025 - Agroizbira.exe
Resource
win7-20241010-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
PO02502050025 - Agroizbira.exe
Resource
win10v2004-20250129-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target PO02502050025 - Agroizbira.exe
- Size 1.2MB
- SHA256 40644b368c1e04cbb944236729d0ecb6f7d5b0f102a14c2ec83e72da6a8e9732
- MD5 07d388ba8f697f42083f7b367c7f11e4
- SHA1 042bde5bf5d5f4926b8e59e949c69fec8164597b
- SHA512 27e810a9a054458015467b84a9c963081651764cd322eab122e55644eff795503086fb0e7308051920546b4875996ba611e45589c67257d6516b096ae4ab5d0f
- SSDEEP 24576:5AHnh+eWsN3skA4RV1Hom2KXFmIaammo5dOb+i+09Utu3oHU5:Ah+ZkldoPK1Xaamy6V8Uk
- MD5 SHA1 SHA512 SSDEEP
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
Loads dropped DLL
Suspicious use of SetThreadContext