General
- Target 8c05f2d5234fc6abc358e6effbcf051ce579380706e7482715682dca0a827aed.exe
- Size 361KB
- Sample260825-cld4qadr3v
- SHA256 8c05f2d5234fc6abc358e6effbcf051ce579380706e7482715682dca0a827aed
Score
7/10
Malware Config
Targets
-
- Target 8c05f2d5234fc6abc358e6effbcf051ce579380706e7482715682dca0a827aed.exe
- Size 361KB
- SHA256 8c05f2d5234fc6abc358e6effbcf051ce579380706e7482715682dca0a827aed
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Drops file in System32 directory
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 7a9ddee34562cd3703f1502b5c70e99cd5bba15de2b6845a3555033d7f6cb2a5
Score3/10