General
- Target d6859252ceb119bb7e3006ee987cc146160d4ad03b682fb06b063d55946971b3.exe
- Size 408KB
- Sample260720-ngaraags4k
- SHA256 d6859252ceb119bb7e3006ee987cc146160d4ad03b682fb06b063d55946971b3
Score
7/10
Malware Config
Targets
-
- Target d6859252ceb119bb7e3006ee987cc146160d4ad03b682fb06b063d55946971b3.exe
- Size 408KB
- SHA256 d6859252ceb119bb7e3006ee987cc146160d4ad03b682fb06b063d55946971b3
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 2e226715419a5882e2e14278940ee8ef0aa648a3ef7af5b3dc252674111962bc
Score3/10