General
- Target order-1812896543124646423.exe
- Size 4.5MB
- Sample201228-ys7knqangs
- SHA256 7911f1a67c2580f0390dd9eea76d879801c77cb2e114a307e28cb3d31b23f340
- MD5 fc8dc8736cbc013863b77c8f9963c8d6
- SHA1 86f046bab6a953fe8323e347b1a0f45730870589
- SHA512 b691feee667980728150316262dba76c87e27ef2a5cea40321986482ac4a61788a61bd7029443bad7c5a1bda8316963a7c5e69a7c9d9eebfa2b1ea224eb9b569
- MD5 SHA1 SHA512
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
order-1812896543124646423.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
order-1812896543124646423.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Targets
-
- Target order-1812896543124646423.exe
- Size 4.5MB
- SHA256 7911f1a67c2580f0390dd9eea76d879801c77cb2e114a307e28cb3d31b23f340
- MD5 fc8dc8736cbc013863b77c8f9963c8d6
- SHA1 86f046bab6a953fe8323e347b1a0f45730870589
- SHA512 b691feee667980728150316262dba76c87e27ef2a5cea40321986482ac4a61788a61bd7029443bad7c5a1bda8316963a7c5e69a7c9d9eebfa2b1ea224eb9b569
- MD5 SHA1 SHA512
Score7/10-
Uses the VBS compiler for execution
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext