General
- Target file.exe
- Size 449KB
- Sample230616-bsdabscc43
- SHA256 ad5fc45f2dd58b5209749b5b5f7aaac5b3413cea80eb200727fa1fd919bb8cf6
- MD5 6c7eb9815cd703da377669b0ce8b296e
- SHA1 346355d5e82b5fc0d98e7473b669e38a60d21650
- SHA512 f778534ee852912125da09c92307492e565453f90cd1a9ae40c399dd19072f15d129f2e4c13db611348f4cf02534652da7be3994866c5ec1a4f00a55dc3f6946
- SSDEEP 6144:96k5WC6JSxgZCHH+tIvZ73uPoZWqw3ebxI/h66swJDRUmiMUmLfkUoH:96uWCisH+tIJ2oBwMS/5JDaWUmL0
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230220-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20230220-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 449KB
- SHA256 ad5fc45f2dd58b5209749b5b5f7aaac5b3413cea80eb200727fa1fd919bb8cf6
- MD5 6c7eb9815cd703da377669b0ce8b296e
- SHA1 346355d5e82b5fc0d98e7473b669e38a60d21650
- SHA512 f778534ee852912125da09c92307492e565453f90cd1a9ae40c399dd19072f15d129f2e4c13db611348f4cf02534652da7be3994866c5ec1a4f00a55dc3f6946
- SSDEEP 6144:96k5WC6JSxgZCHH+tIvZ73uPoZWqw3ebxI/h66swJDRUmiMUmLfkUoH:96uWCisH+tIJ2oBwMS/5JDaWUmL0
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Deletes itself
-
Accesses Microsoft Outlook profiles