Sample details: fb16da28078e1b22d622c19c985a522e

Hashes
MD5: fb16da28078e1b22d622c19c985a522e
SHA1: 048ce32ac327b204436263d51194f586fc41d896
SHA256: b085ad7edaccdecdce33db6f1010a602b84fc65e35534611094a508c139512c2
SSDEEP: 12288:MDWViAmdnvSsZ/Z+64+/mw5bd69JtZ6eS/yoaF4hSNaXrJ7mh+TOXopi:MD+iAmdnvSIA64l/LD9S/IcSNaX1mYqh
Details
File Type: PE32
Yara Hits
YRP/VC8_Microsoft_Corporation | YRP/Microsoft_Visual_Cpp_8 | YRP/IsPE32 | YRP/IsWindowsGUI | YRP/IsPacked | YRP/HasDebugData | YRP/IsBeyondImageSize | YRP/domain | YRP/IP | YRP/contentis_base64 | YRP/DebuggerException__SetConsoleCtrl | YRP/anti_dbg | YRP/screenshot | YRP/spreading_share | YRP/win_files_operation | YRP/win_hook | YRP/Big_Numbers0 | YRP/VC8_Random | YRP/Str_Win32_Winsock2_Library |
Source
http://193.124.117.153/crypt/hard1812_AU2_EXE_cr19.exe
http://193.124.117.153/crypt/hard1812_AU2_EXE_cr19.exe