General
- Target Archive_free_49758.zip
- Size 764.6MB
- Sample260522-ma5gmsgz6j
- SHA256 a0f4d51ad2058fea70ad69e89110f059a63fad30142f60f1bef23281dfcaf802
Score
8/10
Malware Config
Targets
-
- Target Setup.exe
- Size 102KB
- SHA256 7123e1514b939b165985560057fe3c761440a9fff9783a3b84e861fd2888d4ab
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Indirect Command Execution
Adversaries may abuse utilities that allow for command execution to bypass security restrictions that limit the use of command-line interpreters.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of NtSetInformationThreadHideFromDebugger