General
- Target https://download2439.mediafire.com/7p4345foibxgKnlIBRT0STjZTkcgyguF2OjSGvFG6lJVAsNTD__F3R-yUA_YJwWCKdG2GCqU9ijmGtBWHK5Q0iUK7xEcr8IT9SBju_YswppzFnc2mEM29MQHa9J0fyFFHQqIePTWe5WyaANp9uMyGyWJqf9nm3B1HwOdhJKFpp4z/45m9ohpfqouxk8a/SETUP_FILE_(PASS_KEY=1234)).zip
- Sample260620-p7mzzae15q
Score
10/10
Malware Config
Targets
-
- Target https://download2439.mediafire.com/7p4345foibxgKnlIBRT0STjZTkcgyguF2OjSGvFG6lJVAsNTD__F3R-yUA_YJwWCKdG2GCqU9ijmGtBWHK5Q0iUK7xEcr8IT9SBju_YswppzFnc2mEM29MQHa9J0fyFFHQqIePTWe5WyaANp9uMyGyWJqf9nm3B1HwOdhJKFpp4z/45m9ohpfqouxk8a/SETUP_FILE_(PASS_KEY=1234)).zip
Score10/10-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Drops file in System32 directory
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext