General
- Target 66a1be3919f3f23710ebc6d58daf04e5abd52490f4a95993cea670cfc2314809.exe
- Size 418KB
- Sample260810-pmw25stwbz
- SHA256 66a1be3919f3f23710ebc6d58daf04e5abd52490f4a95993cea670cfc2314809
Score
7/10
Malware Config
Targets
-
- Target 66a1be3919f3f23710ebc6d58daf04e5abd52490f4a95993cea670cfc2314809.exe
- Size 418KB
- SHA256 66a1be3919f3f23710ebc6d58daf04e5abd52490f4a95993cea670cfc2314809
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 23d618a0293c78ce00f7c6e6dd8b8923621da7dd1f63a070163ef4c0ec3033d6
Score3/10