General
- Target Account TT_pdf.exe
- Size 64KB
- Sample201109-tkxf73dlcs
- SHA256 ded1a64ebd165901f2a790ab8d7fd0aa3ae2f97738868d2d1add45e033efe738
- MD5 5acf4f5cd6f07a74c0ba5a7f156c70d5
- SHA1 417895ca2899fda56e3f36d35b578d1622405145
- SHA512 9462a6c697124267ae555b88045726d1ea2f2a4fe7ac24c53b19a4cdad6e8790e2987e12e5b62e1672885cec3117c4877627c98c370655cc253ab3af2898e0cc
- MD5 SHA1 SHA512
Score
5/10
Static task
static1
Behavioral task
behavioral1
Sample
Account TT_pdf.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
Account TT_pdf.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Targets
-
- Target Account TT_pdf.exe
- Size 64KB
- SHA256 ded1a64ebd165901f2a790ab8d7fd0aa3ae2f97738868d2d1add45e033efe738
- MD5 5acf4f5cd6f07a74c0ba5a7f156c70d5
- SHA1 417895ca2899fda56e3f36d35b578d1622405145
- SHA512 9462a6c697124267ae555b88045726d1ea2f2a4fe7ac24c53b19a4cdad6e8790e2987e12e5b62e1672885cec3117c4877627c98c370655cc253ab3af2898e0cc
- MD5 SHA1 SHA512
Score5/10-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext