General
- Target AMCRACK.exe
- Size 10KB
- Sample260811-y7brda1crd
- SHA256 93770202bd151660c9e6277c863f3e89cd797852d809514532315907d12efcf8
- MD5 2b1dde15530d58da02fb35c6168b5de7
- SHA1 a51421684aec930088424f6cf5d0ee2d1c8d3087
- SHA512 58d8f5948d9cc8289c93044ba14f2f7ea1809f83d5d3947fd0f076b8e8fd5eaf0b1cda83bffd29b7c066a2e2f1452527dd1fbc5ecfe5eae6956a0a87f6ddc131
- SSDEEP 192:NMKJBrMuj/wSUwlFDZQSNQFva8HrvUsZaQa8aeamwwRXXfobAPB0:Jv8sCFvzMskNhDmwwRXXfobu
- TLSH T18122B45AABE88904F4FF5B34E8724B01AA71B82B4E7AC74E04C504FD0E617E489D37A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
AMCRACK.exe
Resource
win10ltsc2021-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target AMCRACK.exe
- Size 10KB
- SHA256 93770202bd151660c9e6277c863f3e89cd797852d809514532315907d12efcf8
- MD5 2b1dde15530d58da02fb35c6168b5de7
- SHA1 a51421684aec930088424f6cf5d0ee2d1c8d3087
- SHA512 58d8f5948d9cc8289c93044ba14f2f7ea1809f83d5d3947fd0f076b8e8fd5eaf0b1cda83bffd29b7c066a2e2f1452527dd1fbc5ecfe5eae6956a0a87f6ddc131
- SSDEEP 192:NMKJBrMuj/wSUwlFDZQSNQFva8HrvUsZaQa8aeamwwRXXfobAPB0:Jv8sCFvzMskNhDmwwRXXfobu
- TLSH T18122B45AABE88904F4FF5B34E8724B01AA71B82B4E7AC74E04C504FD0E617E489D37A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Suspicious use of NtSetInformationThreadHideFromDebugger