General
- Target Archive_free_49758.zip
- Size 764.6MB
- Sample260522-ma5gmsgz6j
- SHA256 a0f4d51ad2058fea70ad69e89110f059a63fad30142f60f1bef23281dfcaf802
Score
8/10
Malware Config
Targets
-
- Target Setup.exe
- Size 102KB
- SHA256 7123e1514b939b165985560057fe3c761440a9fff9783a3b84e861fd2888d4ab
Score8/10Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
Indirect Command Execution
Adversaries may abuse utilities that allow for command execution to bypass security restrictions that limit the use of command-line interpreters.
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
Suspicious use of NtSetInformationThreadHideFromDebugger