General
- Target PURCHASE ORDER.exe
- Size 948KB
- Sample201006-mk2rbd46q2
- SHA256 21e5114a7f07c582b74a78a0e3cf75ac751f4b3adeb609bda84d5755a6b5c2d2
- MD5 fa33ab41d8334ca25efdb48fe102a14c
- SHA1 28326df42e3b0922b2c3133c4cf35488e410301a
- SHA512 d9ae4bbf9c8607dd89d84a6fd7d1bbef6ba7530dffffc2053c1ecd8d25d2b401de678e633d7fc5d0c1bca5c24e0c61e54b6ed5f2c9371ce676d393759810ea3e
- MD5 SHA1 SHA512
Score
9/10
Static task
static1
Behavioral task
behavioral1
Sample
PURCHASE ORDER.exe
Resource
win7v200722
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
PURCHASE ORDER.exe
Resource
win10v200722
0 signatures
0 seconds
Malware Config
Targets
-
- Target PURCHASE ORDER.exe
- Size 948KB
- SHA256 21e5114a7f07c582b74a78a0e3cf75ac751f4b3adeb609bda84d5755a6b5c2d2
- MD5 fa33ab41d8334ca25efdb48fe102a14c
- SHA1 28326df42e3b0922b2c3133c4cf35488e410301a
- SHA512 d9ae4bbf9c8607dd89d84a6fd7d1bbef6ba7530dffffc2053c1ecd8d25d2b401de678e633d7fc5d0c1bca5c24e0c61e54b6ed5f2c9371ce676d393759810ea3e
- MD5 SHA1 SHA512
Score9/10-
ServiceHost packer
Detects ServiceHost packer used for .NET malware
-
Suspicious use of SetThreadContext