Static task
static1
Behavioral task
behavioral1
Sample
472-84-0x000000001A910000-0x000000001A919000-memory.dmp.dll
Resource
win7v20210410
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
472-84-0x000000001A910000-0x000000001A919000-memory.dmp.dll
Resource
win10v20210410
windows10_x64
0 signatures
0 seconds
General
-
Target
472-84-0x000000001A910000-0x000000001A919000-memory.dmp
-
Size
36KB
-
MD5
b4eec11177d284bc32c20a06d0ab43fb
-
SHA1
1d28dcb836ea4727dd05372e7996ef6e25bd8fca
-
SHA256
b13ffaca4d87176cf54c5f567d24f8e509c78681c9cf55d8189936611dd58671
-
SHA512
789cc0437d7ba500faa3db9619aa4c8f627040d5405b796f21c1122212671773eeecadedcded16112e2961de9cb220226880c161bba153db438c6f69258af01b
Score
10/10
Malware Config
Signatures
-
DoubleBack x64 Payload 1 IoCs
Processes:
resource yara_rule sample family_doubleback_x64 -
Doubleback family
Files
-
472-84-0x000000001A910000-0x000000001A919000-memory.dmp.dll windows x64