General
- Target Order_List_PO# 081928.pdf.exe
- Size 583KB
- Sample201009-c57seqakka
- SHA256 8f1df804a5fc826de1487d95db7e15faede754cd925132f7e920fd712e154208
- MD5 0302724a82bc84d658e3089248099265
- SHA1 71ae3a8010c5146e09f08199e2907fdba5b52a59
- SHA512 89d7def5394fae7cad8f32e2361a9ea6eff5749f56adcf4eae02839ca97e9c3c8a6ba48f20737898e42ad9c77eda50660e20dbb4200b3583f54eb16154c5003e
- MD5 SHA1 SHA512
Score
9/10
Static task
static1
Behavioral task
behavioral1
Sample
Order_List_PO# 081928.pdf.exe
Resource
win7
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
Order_List_PO# 081928.pdf.exe
Resource
win10v200722
0 signatures
0 seconds
Malware Config
Targets
-
- Target Order_List_PO# 081928.pdf.exe
- Size 583KB
- SHA256 8f1df804a5fc826de1487d95db7e15faede754cd925132f7e920fd712e154208
- MD5 0302724a82bc84d658e3089248099265
- SHA1 71ae3a8010c5146e09f08199e2907fdba5b52a59
- SHA512 89d7def5394fae7cad8f32e2361a9ea6eff5749f56adcf4eae02839ca97e9c3c8a6ba48f20737898e42ad9c77eda50660e20dbb4200b3583f54eb16154c5003e
- MD5 SHA1 SHA512
Score9/10-
ServiceHost packer
Detects ServiceHost packer used for .NET malware
-
Suspicious use of SetThreadContext