General
- Target SecuriteInfo.com.Trojan.DownLoader49.2964.21114.20012.exe
- Size 615KB
- Sample260519-a8vc4say2m
- SHA256 2eb8c662ddb5ae620d369bec65498befa76792857cc8ebc22eef791b7cce3ff5
- MD5 780bb7a870545eaf1cfeb28d15538bec
- SHA1 ba58c0128ce195be6e9e0871411be76c798d051a
- SHA512 a35a94d48e974eb19456f1cac0e5dfa4b432fcea5b7c8c969d8b039d809bcf59edb6b996072a570d83d51b633c76e885acdbf0d1bc73b9657d2feff1ecac7d17
- SSDEEP 12288:JHAw04WEC7+ox8tlPyKioJnqdkAqnu9c4xEM7p89XLFm9v6AZRXjXmJxl7/v9s+:JHAf4wxGffiakqnu9c4xNibAp6A7WJfC
- TLSH T155D4120915AEC903C4531FB116B6C2302375AC9CD630E52E4EE96CCFB93B356E66A2D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Trojan.DownLoader49.2964.21114.20012.exe
Resource
win10ltsc2021-20260513-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
fuery
C2
-
http://take.takemetotheriver.top/
-
http://hey.wtfomginc.top/
-
http://ds.emailmeanything.sbs/
-
http://top.realslimshady.xyz/
-
http://92.dmrdjmejuah.icu/
-
http://real.kabgagk234d.info/
-
http://set.setmeasdomain.cyou/
-
http://omg.itsjasonborn.today/
-
http://oh.whatisyourname.buzz/
-
http://let.mebeyourfriend.digital/
-
http://if.youwannabemylover.life/
-
http://make.mydaymakemyday.info/
-
http://iahfi.visbxskagt.com/
-
http://laf.oahgsfwklg.top/
Targets
-
- Target SecuriteInfo.com.Trojan.DownLoader49.2964.21114.20012.exe
- Size 615KB
- SHA256 2eb8c662ddb5ae620d369bec65498befa76792857cc8ebc22eef791b7cce3ff5
- MD5 780bb7a870545eaf1cfeb28d15538bec
- SHA1 ba58c0128ce195be6e9e0871411be76c798d051a
- SHA512 a35a94d48e974eb19456f1cac0e5dfa4b432fcea5b7c8c969d8b039d809bcf59edb6b996072a570d83d51b633c76e885acdbf0d1bc73b9657d2feff1ecac7d17
- SSDEEP 12288:JHAw04WEC7+ox8tlPyKioJnqdkAqnu9c4xEM7p89XLFm9v6AZRXjXmJxl7/v9s+:JHAf4wxGffiakqnu9c4xNibAp6A7WJfC
- TLSH T155D4120915AEC903C4531FB116B6C2302375AC9CD630E52E4EE96CCFB93B356E66A2D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Adds Run key to start application
-
Suspicious use of SetThreadContext